Subject: Re: BSD auth for NetBSD
To: Roland Dowdeswell <elric@imrryr.org>
From: Todd Vierling <tv@duh.org>
List: tech-security
Date: 09/13/2003 14:20:23
On Sat, 13 Sep 2003, Roland Dowdeswell wrote:

: That is what PAM and BSD Auth are, wrapper APIs around things that
: do authentication.  I was suggesting that it is going overboard to
: put a wrapper around two wrappers which will surely end up having
: the compromises of both systems.

From this POV, and given the rather simplified authentication system used by
BSD Auth, it should (in SMOP theory) be pretty simple to make a PAM module
that simply defers to BSD-Auth and use it where appropriate.

(It's not possible to do PAM inside of BSD Auth, but it should be possible
to do the converse.)

-- 
-- Todd Vierling <tv@duh.org> <tv@pobox.com>