ASRock C3558D4I-4L [31/64] Pam order settings

3.7.7 PAM Order Settings

This page is used to configure the PAM ordering for user authentication.

PAM Order Settings Page

PAM Authentication Order: It shows the list of available PAM modules supported in

BMC. Click and Drag the required PAM module to change its order.

Note:

1. It is recommended not keeping the same username for different PAM modules.

2. If Authentication fails, the reason for failure could be invalid user or invalid password.

3. If Radius Authentication fails, we can’t differentiate whether it is invalid user or invalid password.

So it is always treated as Invalid username error and PAM will try other Authentication Methods.

4. If AD contains secret username & password as empty, Authentication fails will be always treated

as Invalid Password error. For Invalid Password error PAM will not try other Authentication

Methods. So it is recommended keeping AD in the last location in PAM order.