Configuring CA PAM Client

This section provides information about using the CA PAM Client and configuring z/OS security.
cszscss151
After installing the CA PAM Client, perform the following configuration tasks to configure the Linux system:
  • Modifying the ESM configuration file to your site-specific standards
  • Starting the ESM proxy server during preliminary testing and during system startup
  • Enabling the NSS module
  • Enabling the CA PAM module
The configuration topics contain references to sample files. The location of the sample files depends on how you installed the CA PAM Client, as follows:
  • If you installed from a source distribution using a tar file, the <examples> directory is pam_CA_esm-<level>/examples. This directory was created when you unpacked the source tar file during the install process.
  • If you installed from a source distribution using a source RPM, the location of the <examples> directory depends on your Linux distribution:
    • If your Linux distribution is a SuSE distribution, the <examples> directory is /usr/share/doc/packages/pam_CA_esm.
    • If your Linux distribution is a Red Hat distribution, the <examples> directory is /usr/share/doc/pam_CA_esm-<level>.
  • If you installed from a binary distribution, the location depends on which binary RPM you installed:
    • If you installed the 32-bit RPM (pam_CA_esm-<level>-<version>.s390.rpm), the <examples> directory is /usr/share/doc/packages/pam_CA_esm.
    • If you installed the 64-bit RPM (pam_CA_esm-<level>-<version>.s390x.rpm), the <examples> directory is /usr/share/doc/pam_CA_esm-<level>. This is because the 32-bit RPM was built on a SuSE distribution, whereas the 64-bit RPM was built on a Red Hat distribution.