Just posting in case this is helpful for other authentication neophytes.
I wanted to enable external authentication for http using PAM with
support for both Windows and unix account authentication. In my case,
this is what worked:
In /etc/config.pm, changed $WebExternalAuth to 1 (true).
Alias /tracker /usr/local/apache/rt/WebRT/html
Authentication worked, but I got multiple requests for passwords from
the graphics and css loads. I needed to get rid of authentication for
the NoAuth directory. The following worked:
Satisfy Any Allow from all
pam.conf entries are as follows (Solaris 8):
httpd auth sufficient /usr/lib/security/$ISA/pam_unix.so
httpd auth sufficient /usr/lib/security/$ISA/pam_smb_auth.so
httpd account sufficient /usr/lib/security/$ISA/pam_permit.so.1