Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 07 Mar 2000 11:11:41 +0800
From:      Peter Wemm <peter@netplex.com.au>
To:        "Andrew J. Korty" <ajk@iu.edu>
Cc:        Adrian Pavlykevych <pam@polynet.lviv.ua>, cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org
Subject:   Re: cvs commit: src/lib/libpam/modules/pam_ssh Makefile 
Message-ID:  <20000307031141.39FAD1CDE@overcee.netplex.com.au>
In-Reply-To: Message from "Andrew J. Korty" <ajk@iu.edu>  of "Mon, 06 Mar 2000 21:29:46 EST." <Pine.BSF.4.21.0003062114560.10020-100000@tempest.waterspout.com> 

next in thread | previous in thread | raw e-mail | index | archive | help
"Andrew J. Korty" wrote:
> > "Andrew J. Korty" wrote:
> > > > Make pam_ssh work.  It had an undefined symbol when it was
> > > > dlopen()ed.  I'm not quite sure about this, I think it should be
> > > > using -lssh_pic since it's being linked into a .so, but nothing
> > > > seems to complain ahd it does work.  (well, it works for using
> > > > the authorized_keys file, but I have not figured out how to get
> > > > it to start a ssh-agent and cache the key for me)
> > >   
> > > Do you have this line in /etc/pam.conf?
> > 
> > No, there were no examples.  The thought never occurred to have a go
> > at xdm. :-)  I was trying to use 'login'.
> 
> The login program doesn't use the PAM session layer, probably
> because there is no underlying program running during the session
> as there is with XDM, so there would be no way to close the PAM
> session.

Linux's login program does "hang around" to implement the session stuff.  I'm
not sure of the details.

BTW; I suspect there isn't much to stop us making a liblogin (or move the
login stuff to libutil) and build calls to it directly into telnetd,
rlogind, rshd, getty, sshd, etc.  We could implement persistant supervisors
that way. (getty would have to hang around though instead of exec'ing a
login, but that's no big deal these days considering the majority of
machines that have lots of logins use telnetd/sshd/xwindows instead of
physical ttys)

Cheers,
-Peter



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20000307031141.39FAD1CDE>