Preface

About VMS Authentication Module

The VMS Authentication Module (VAM) provides users of OpenVMS systems controlled access to both user-written applications and the OpenVMS system overall using LDAP and/or RADIUS.  It can be incorporated into an OpenVMS-based platform in two ways:

·         Via an API that the user incorporates into a specific application to control access to that application.

·         On a system-wide basis via use of the LGI callouts for OpenVMS LOGINOUT.EXE

·         On a system-wide basis via the use of the OpenVMS ACME (Authentication and Credential Management Extension) interface.

Chapters three through six describe the two mechanisms and how they are implemented.

Introducing This Guide

This guide describes the VMS Authentication Module (VAM) software. It covers the following topics: software installation, configuration, and server monitoring and control.

What You Need to Know Beforehand

Before using VAM, you should be familiar with:

·         Computer networks in general

·         OpenVMS operating system and file system

·         The TCP/IP stack (MultiNet, TCPware, or HP’s OpenVMS TCP/IP software) you’re using

How This Guide Is Organized

This guide has the following contents:

·         Chapter 1, Before You Begin, explains what you need to prepare for an installation.

·         Chapter 2, Installing and Configuring VAM, provides a step-by-step procedure for executing the software installation and configuring general VAM options.

·         Chapter 3, Using LDAP and VAM, explains how to configure VAM for using LDAP authentication.

·         Chapter 4, Using RADIUS and VAM, explains how to configure VAM for using RADIUS authentication.

·         Chapter 5, Using LOCALUAF and VAM, explains how to configure VAM for using the local UAF file for authentication.

·         Chapter 7, Using the VAM API, describes how to integrate the VAM API into a user-written application.

Accessing the VAM Public Mailing List

Process Software maintains two public mailing lists for VAM customers.

The Info-VAM mailing list is a forum for discussion among VAM system managers and programmers. Questions and problems regarding VAM can be posted for a response by any of the subscribers. To subscribe to Info-VAM, send a mail message with the word SUBSCRIBE in the body to Info-VAM-request@lists.process.com

The VAM-Announce mailing list is a one-way communication (from Process Software to you) used for the posting of announcements relating to VAM (patch releases, product releases, etc.). To subscribe to VAM-Announce, send a mail message with the word SUBSCRIBE in the body to VAM-Announce-request@lists.process.com

Obtaining Customer Support

You can use the following customer support services for information and help about VAM and other Process Software products if you subscribe to our Product Support Services. (If you bought VAM products through an authorized Process Software reseller, contact your reseller for technical support.) Contact Technical Support directly using the following methods:

Electronic Mail

E-mail relays your question to us quickly and allows us to respond, as soon as we have information for you. Send e-mail to support@process.com. Be sure to include your:

·         Name

·         Telephone number

·         Company name

·         Maintenance agreement number

·         Product name and version number

·         Operating system version number

·         A detailed problem description

Telephone

If calling within the United States or Canada, call Process Software Technical Support toll-free at (800) 394-8700. If calling from outside the United States or Canada, dial +1 (508) 628-5074. Please be ready to provide your name, company name, maintenance contract number, and telephone number.

Web

There is a variety of useful technical information available on our web site, www.process.com

Conventions Used

 

Convention

Meaning

host

Any computer system on the network. The local host is your computer. A remote host is any other computer.

monospaced type

System output or user input. User input is in reversed bold type.

Example: Is this configuration correct? YES

 

Monospaced type also indicates user input where the case of the entry should be preserved.

italic type

Variable value in commands and examples. For example, username indicates that you must substitute your actual username.  Italic text also identifies documentation references.

[directory]

Directory name in an OpenVMS file specification. Include the brackets in the specification.

[optional-text]

(Italicized text and square brackets) Enclosed information is optional. Do not include the brackets when entering the information.

Example:  START/IP line address [info]

This command indicates that the info parameter is optional.

{value | value}

Denotes that you should use only one of the given values. Do not include the braces or vertical bars when entering the value.

Note

Information that follows is particularly noteworthy.

Caution

Information that follows is critical in preventing a system interruption or security breach.

key

Press the specified key on your keyboard.

Ctrl+key

Press the control key and the other specified key simultaneously.

Return

Press the Return or Enter key on your keyboard.