Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 5 Sep 2021 13:24:16 -0400
From:      Eric McCorkle <eric@metricspace.net>
To:        Greg <greg@unrelenting.technology>, freebsd-current@freebsd.org, FreeBSD Hackers <freebsd-hackers@freebsd.org>
Subject:   Re: PAM module for loading ZFS keys on login
Message-ID:  <b265fa82-53f2-59f4-65c2-b07a9412bf83@metricspace.net>
In-Reply-To: <67F44CFE-2496-4B13-8583-8A80D9ED3A4A@unrelenting.technology>
References:  <b4d216da-d4b8-12a6-3873-566e5044678c@metricspace.net> <67F44CFE-2496-4B13-8583-8A80D9ED3A4A@unrelenting.technology>

next in thread | previous in thread | raw e-mail | index | archive | help
Interesting, I wasn't aware of the upstream module.  I'd say that's
preferable to the one I wrote.

I think you would need to wire that into the 'modules' directory under
libpam.  I can look into doing that.

On 9/5/21 11:27 AM, Greg wrote:
> 
> 
> On September 5, 2021 4:54:26 PM GMT+03:00, Eric McCorkle <eric@metricspace.net> wrote:
>> All,
>>
>> This patch creates a new PAM module that will load a ZFS key upon a
>> successful login: https://reviews.freebsd.org/D31844.  It will use the
>> user's auth token as the key argument to loading a ZFS encryption key on
>> a user-specific ZFS data set.
> 
> There's already an upstream module which I've attached to the build in https://reviews.freebsd.org/D28018
> 
> Any particular reason to write a custom one?
> 



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?b265fa82-53f2-59f4-65c2-b07a9412bf83>