Re: replace PAM with BSD Auth (was: slow su? [solved])

[jnemeth%victoria.tc.ca@localhost (John Nemeth)]

On Jan 11,  9:02pm, David Holland wrote:
} On Thu, Aug 18, 2011 at 05:28:02PM -0700, Greg A. Woods wrote:
}  > > > My opinion remains that PAM ought to go, but that's not trivial...
}  > > 
}  > > And replace it with what?
}  > 
}  > PAM could be replaced with BSD Auth, as was discussed long ago.
} 
} bsdauth doesn't support the same authentication module interface (or,
} AIUI, anything close to it) so it won't do. There are some PAM modules
} in pkgsrc, for example, and other third-party ones that aren't but
} that someone probably uses.

     Even worse, as far as I know, it doesn't support the same API.
There are an awful lot of third party apps that depend on the PAM API
for doing authentication.  Realistically, the APIs are an essential
part of a modern OS.  In theory, you could change the config file
format since third party apps don't depend on it (with the exception of
things like webmin and possibly installation routines).

}-- End of excerpt from David Holland