Ciara ORION HF210-G5, User Manual

Page: 88 / 135

87
28.7.7 PAM Order Settings
This page is used to configure the PAM ordering for user authentication.
PAM Order Settings Page
PAM Authentication Order: It shows the list of available PAM modules supported in BMC. Click and Drag the required PAM module to change its order.
Note :
1. It is recommended not keeping the same username for different PAM modules.
2. If Authentication fails, the reason for failure could be invalid user or invalid password.
3. If Radius Authentication fails, we can’t differentiate whether it is invalid user or invalid password. So it is always treated as Invalid username error and PAM will try other Authentication Methods.
4. If AD contains secret username & password as empty, Authentication fails will be always treated as Invalid Password error. For Invalid Password error PAM will not try other Authentication
Methods. So it is recommended keeping AD in the last location in PAM order.