Subject: Re: PAM enabled on head
To: None <current-users@NetBSD.org>
From: John Nemeth <jnemeth@victoria.tc.ca>
List: current-users
Date: 03/08/2005 01:07:34
On Jul 29,  2:03am, Bernd Ernesti wrote:
} On Mon, Mar 07, 2005 at 11:17:29PM -0500, Christos Zoulas wrote:
} 
} > We have changed PAM to fail closed. I.e. a missing PAM configuration will
} > default to fail authentication as opposed to allow it. We are still
} > thinking of adding even more strict checks in the authentication path, so
} > that incorrect configurations will not default to allow someone access.
} 
} So this means that you can no longer login if you don't have an /etc/pam.d
} or an empty one?

     If /etc/pam.d is empty then there would be nothing to tell PAM
which authentication modules to use, so why would you expect it to
work?  This would be sort of like deleting /etc/passwd.

}-- End of excerpt from Bernd Ernesti