11.3 Other Tasks Following Installation

If you have chosen to configure for authentication redirection on a platform that is running Linux or UNIX, you will need to manually configure PAM on that system. For technical instructions on how to configure PAM for authentication, see PAM Configuration Notes.

The Platform Services installer automatically copies sample configurations you can use as templates to the following location:

If you have chosen to configure for authentication redirection on a platform that is running AIX, and you want to use IBM’s proprietary Loadable Authentication Module (LAM), you will need to manually configure the Fan-Out Driver’s LAM module on that AIX system. For technical instructions on how to configure LAM for authentication, see LAM Configuration Notes.

The Platform Services installer automatically copies sample LAM-related configuration files you can use as templates to the following location:

  /usr/local/ASAM/bin/PlatformServices/methods.cfg.sample
  /usr/local/ASAM/bin/PlatformServices/user.sample
  /usr/local/ASAM/bin/PlatformServices/user.sample2

Upon initial deployment of the Fan-Out Driver Platform Services, you may find it useful and necessary to perform an initial migration or synchronization of users and groups within the Identity Vault. You can perform a full synchronization by executing asamrcvrd fullsync. Location of this executable will vary depending on your target platform. See Table 11-3 for the appropriate full command line that includes your directory location.

Starting Platform Services requires you to start one or more of the following components, depending on your configuration:

For more information about these components, see About Platform Services for Linux and UNIX and Section 12.0, Configuring and Administering Platform Services.

Stopping Platform Services requires you to stop one or more of the following components, depending on your configuration:

For more information about these components, see About Platform Services for Linux and UNIX and Section 12.0, Configuring and Administering Platform Services.

If you are using PAM (or LAM on AIX) for password authentication, it may be helpful to verify that the Platform Services Process (asampsp) and the API Library (libascauth) are functioning properly, before you finalize PAM configuration. You can do this with a program called asctest, which is included with your Platform Services installation. Here’s where to find it:

/usr/local/ASAM/bin/PlatformServices/PlatformClient/asctest

This program allows you to test the various calls (listed in Table 11-10) that can be made to the API library in support of PAM. To use asctest, simply enter it from a command line with no parameters. When prompted select the desired method by entering its corresponding letter (a-o) and respond to any further prompts. The following table provides descriptions of the API methods.