Subject: Re: PAM enabled on head
To: None <current-users@netbsd.org>
From: Geoff Wing <mason@primenet.com.au>
List: current-users
Date: 03/08/2005 13:00:42
Lubomir Sedlacik <salo@Xtrmntr.org> typed:
: On Tue, Mar 08, 2005 at 10:41:46AM +0100, Bernd Ernesti wrote:
:> Updates of /etc is allways not easy.
: updates of /etc using proper mechanisms (/etc/postinstall and etcupdate)
: are actually _very_ easy.

With PAM, using postinstall, it's not.  postinstall is good for installing
defaults like /etc/rc.d/  but whilst a default /etc/pam.d/* set is provided,
the /etc/pam.d/ stuff is like /etc/rc.conf .  People may have altered it
so overwriting it is not an option.  This is less an issue with infrequent
updates between, say, major versions where it may be easy enough to use
version control mechanisms like rcs (or cvs or whatever), however -current
has seen several changes during its breaking in period which takes more time
to fix than issuing "postinstall -s .... -d .... fix"

Regards,
Geoff