Subject: Re: PAM enabled on head
To: None <current-users@NetBSD.org>
From: John Nemeth <jnemeth@victoria.tc.ca>
List: current-users
Date: 03/08/2005 01:07:34
On Jul 29, 2:03am, Bernd Ernesti wrote:
} On Mon, Mar 07, 2005 at 11:17:29PM -0500, Christos Zoulas wrote:
}
} > We have changed PAM to fail closed. I.e. a missing PAM configuration will
} > default to fail authentication as opposed to allow it. We are still
} > thinking of adding even more strict checks in the authentication path, so
} > that incorrect configurations will not default to allow someone access.
}
} So this means that you can no longer login if you don't have an /etc/pam.d
} or an empty one?
If /etc/pam.d is empty then there would be nothing to tell PAM
which authentication modules to use, so why would you expect it to
work? This would be sort of like deleting /etc/passwd.
}-- End of excerpt from Bernd Ernesti