NI_PAM Installation Document
1. Overview
NI_PAM is software that provides pluggable authentication and
single-sign-on in Windows NT operating system.  Installation of NI_PAM
is somewhat complex.  This document tries to help you install NI_PAM
in your Windows NT.  For more about NI_PAM, please refer to the paper
"NI_PAM : Pluggable Authentication Module in Windows NT". 

2. Files.
The following are the files contained in this archive:
ni_pam.dll 	The main part of NI_PAM that implements Pluggable
Authentication Module. 
ni_gina.dll	The GINA that uses NI_PAM.  
ni_krb4.dll	Kerberos 4 authentication module.
ni_krb5.dll	Kerberos 5 authentication module.
ni_nw.dll	Netware 4.0 authentication module.

3. Installation.
Installation of NI_PAM is achieved with 4 steps.
1) Install authentication mechanisms you want to use (e.g. kerberos 4,
kerberos 5, and netware 4.0)

* Kerberos 4
Get Kerberos 4 client from MINK distribution:
http://web.mit.edu/is/help/mink/
Please make sure to store tickets under \WinNT directory by setting
KRBTKFILE environment variable to \WinNT\(filename).  I use
\WinNT\krb4.krb.  MINK Kerberos 4 stores tickets under \Temp in
default, but GINA cannot access files in \Temp.  

* Kerberos 5
Get Kerberos 5 client from MIT's NT Alpha 2 Snapshot. 
Copy  krb5_32.dll to \Winnt\System32.
Put configuration file (krb5.ini) in \Winnt.

* Netware 4.0
Install Novell Netware 4.0 client.

2) Install NI_PAM DLLs with setup.exe.
Ni_pam.dll, gina.dll, ni_krb4.dll, ni_krb5.dll, and ni_nw.dll are
installed in a directory e.g. \Program Files\CITI .

3) Modify path.  Include \Program Files\CITI (or wherever NI_PAM DLLs
are installed) to environment variable "Path" of "System Variables".  

4) Modify Registry.  Set value ni_gina_auth in a key:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsNT\CurrentVersion\Winlogon
to use your authentication mechanisms.  This key contains a PAM
configuration table, e.g. "required,ni_krb5.dll,optional,ni_nw.dll"