Subject: Re: PAM and su -K
To: Jason Thorpe <thorpej@shagadelic.org>
From: Emmanuel Dreyfus <manu@netbsd.org>
List: tech-userlevel
Date: 01/16/2005 19:22:01
Jason Thorpe <thorpej@shagadelic.org> wrote:

> > I use -K or -l when I need to be root _quickly_ during Kerberos
> > failures (less common than it used to be since I don't hack on
> > Kerberos itself any more, but I used to have to do it quite a
> > bit).  I would be annoyed if they disappeared.
> 
> So, does that mean we should have -Y (disable YP, in case there are NIS
> problems) and -H (disable Hesiod, in case there are DNS problems) to 
> force su to access the local passwd database?

No, because offering theses will cause us problems with PAM. We already
have enough with -K which is already there.

Why was su -K introduced, BTW?

-- 
Emmanuel Dreyfus
http://hcpnet.free.fr/pubz
manu@netbsd.org