Subject: Re: BSD auth for NetBSD
To: Jun-ichiro itojun Hagino <>
From: Noriyuki Soda <>
List: tech-security
Date: 09/09/2003 06:38:13
>>>>> On Tue,  9 Sep 2003 06:15:27 +0900 (JST), (Jun-ichiro itojun Hagino) said:

> 	as a firm believer of "rough consensus and running code"

Well, I don't see that there is rough consensus to import BSD auth
as the basic layer of authentication, because many people pointed out
that BSD auth can be implemented over PAM, and PAM can never be
implemented over BSD auth, and also people who agreed with BSD auth
couldn't produce any counterevidence.

I have read Frank's post, but he didn't mention which way we should

>	here's the working code for BSD auth for NetBSD.

There is a PAM implementation for NetBSD, too.
Why don't you commit the PAM implementation instead?

>	now, may i commit?

I think you shouldn't, unless your code is using PAM to implement
BSD auth.
If it implements BSD auth over PAM, I think it may be fine to commit
it, but I guess it doesn't, does it?

I'm really going to sleep now... ;-)