Subject: Re: PAM and su -K
To: Jason Thorpe <email@example.com>
From: Emmanuel Dreyfus <firstname.lastname@example.org>
Date: 01/16/2005 19:22:01
Jason Thorpe <email@example.com> wrote:
> > I use -K or -l when I need to be root _quickly_ during Kerberos
> > failures (less common than it used to be since I don't hack on
> > Kerberos itself any more, but I used to have to do it quite a
> > bit). I would be annoyed if they disappeared.
> So, does that mean we should have -Y (disable YP, in case there are NIS
> problems) and -H (disable Hesiod, in case there are DNS problems) to
> force su to access the local passwd database?
No, because offering theses will cause us problems with PAM. We already
have enough with -K which is already there.
Why was su -K introduced, BTW?