Can AD domain accounts manage local accounts passwords on MYSQL server via PAM?

Document ID : KB000117458
Last Modified Date : 12/10/2018
Show Technical Document Details
Question:
Can AD domain accounts manage local accounts passwords on MSSQL server via PAM?
Answer:

Using AD accounts to manage local accounts on the MSSQL server via PAM is not supported. 
Note: The only supported dissimilar account combination is the use of an LDAP or Active Directory account to change the password of a UNIX account. https://docops.ca.com/ca-privileged-access-manager/3-2-2/EN/implementing/protect-privileged-account-credentials/add-target-accounts-to-target-applications/use-an-alternate-account-to-change-passwords-optional.