Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 28 Apr 2002 11:10:47 -0700 (PDT)
From:      "Jason C. Wells" <jcw@highperformance.net>
To:        freebsd-chat@freebsd.org
Subject:   How much PAM is enough?
Message-ID:  <Pine.BSF.4.21.0204281051470.19542-100000@server2.highperformance.net>

next in thread | raw e-mail | index | archive | help
I was wondering what kind of implementation of PAM and native FreeBSD
authentication folks use.  Specifically, it seems that one can use various
PAM modules to supplant various FreeBSD functionalities.

For example, there exists a module "pam_nologin".  Why would I want to use
a PAM module when FreeBSD supports this natively?

So I have concluded that my pam.d config will add only those modules
needed to incorporate special functionalities.  For example, I have
included pam_krb5 port to work with the MIT kerberos port.  I will add
pam_ldap soon.  It seems to me that one should be able to provide
authentication with 4-6 modules in the stack.  On the net I see examples
of many modules in the stack.

What is your opinion on the matter?

Is FreeBSD moving farther down the PAM path and away from standard unix
authentication?  It would seem so.

Thanks,
Jason C. Wells


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-chat" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.21.0204281051470.19542-100000>