Under Linux, you can easily configure pluggable authentication module (PAM) authentication for Grid Management Services for users who can log on to the system but who do not have local system accounts. To configure the authentication, log on as the root account. Then enter the following commands:

This configuration should enable authentication for user accounts through Lightweight Directory Access Protocol (LDAP), Active Directory, Vintela Authentication Services (VAS), and similar services.

These commands copy all lines that start with either auth or account from the existing system-auth configuration file to a new ga_auth configuration file. Lines in the source file that contain the problematic pam_tally2.so module (which can cause accounts to be locked out) are omitted.

Note: Under SuSE Linux, use the common-auth file rather than system-auth.

After performing the above configuration, you need to edit the ga.conf file located in the LSF_TOP/gms/conf/ directory by adding the following setting:

Note: LSF_TOP refers to the directory where IBM Platform LSF is installed.

You need to restart the Grid Management Services by submitting the following commands under the root account:

In the cd command, GMS_TOP specifies the directory where Grid Management Services is installed.

The approach described in this note should supersede prior documents that relate to requirements for particular lines in the ga_auth PAM file or for patches to the ga_auth module.

Operating System and Release Information