Novell LINUX ENTERPRISE DESKTOP 11, Manual, Page: 38 / 450

After installing
pam_mount
, a template of
pam_mount.conf.xml
is available in
/etc/security
. The description of the various elements can be found in the manual
page
man 5 pam_mount.conf
.
A basic configuration of this feature can be done by means of yast. Select Network
Settings > Windows Domain Membership > Expert Settings to add the respective file
server.
2.3.3 limits.conf
System limits can be set on a user or group basis in the file
limits.conf
, which is
read by the
pam_limits
module. The file allows you to set hard limits, which may
not be exceeded at all, and soft limits, which may be exceeded temporarily. To learn
about the syntax and the available options, read the comments included in the file
/etc/security/limits.conf
.
2.4 Configuring PAM Using
pam-config
The pam-config tool helps you configure the global PAM configuration files under
/etc/pam.d/common-*-pc
as well as several selected application configurations.
For a list of supported modules, use the command
pam-config --list-modules
.
Use the
pam-config
command to maintain your PAM configuration files. Add new
modules to your PAM configurations, delete other modules or modify options to these
modules. When changing global PAM configuration files, no manual tweaking of the
PAM setup for individual applications is required.
A simple real-world use case for pam-config would involve the following:
1 Auto-generate a fresh Unix-style PAM configuration. Let pam-config
create the simplest possible setup which you can extend later on. The
pam-config --create
command creates a simple UNIX authentication
configuration. Pre-existing configuration files not maintained by pam-config are
overwritten, but backup copies are kept as
*.pam-config-backup
.
24 Security Guide