Why you need Privileged Account Management 

So very nice of you to say! Thank you!

Thanks so much for saying so!

Sorry, our company policy does not allow us to recommend or endorse specific vendors or products without legal review.

I’m glad you liked it!

Clients have been using PAM solutions successfully from vendors like IBM for more than a decade

You’re very kind to say so!

@@jeffcrume hope you got some plans to take classes in Australian Universities

Thank you!

It's an interesting question...I didn't think so and I found some information on topic: access.redhat.com/documentation/ 19.4. Kerberos and PAM Currently, kerberized services do not make use of Pluggable Authentication Modules (PAM) - kerberized servers bypass PAM completely. However, applications that use PAM can make use of Kerberos for authentication if the pam_krb5 module (provided in the pam_krb5 package) is installed. The pam_krb5 package contains sample configuration files that allow services like login and gdm to authenticate users as well as obtain initial credentials using their passwords. If access to network servers is always performed using kerberized services or services that use GSS-API, such as IMAP, the network can be considered reasonably safe. Note Administrators should be careful to not allow users to authenticate to most network services using Kerberos passwords. Many protocols used by these services do not encrypt the password before sending it over the network, destroying the benefits of the Kerberos system. For example, users should not be allowed to authenticate using their Kerberos passwords over Telnet.

Kerberos could be used behind the scenes to accomplish PAM but, by itself, it wouldn’t give the level of control (e.g., check-out, check-in) or visibility (e.g., session recording) that would be part of an enterprise class PAM solution.