[19741] in Kerberos
Re: which krb5 PAM module on Solaris 8?
daemon@ATHENA.MIT.EDU (Balazs GAL)
Fri Aug 1 18:50:07 2003
Message-ID: <3F2AEE30.8020503@rit.bme.hu>
Date: Sat, 02 Aug 2003 00:48:16 +0200
From: Balazs GAL <balsa@rit.bme.hu>
MIME-Version: 1.0
To: Sam Hartman <hartmans@mit.edu>, kerberos@mit.edu,
mooney@dogbert.cc.ndsu.NoDak.edu
In-Reply-To: <tslbrv9gpmw.fsf@konishi-polis.mit.edu>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 8bit
Errors-To: kerberos-bounces@mit.edu
Sam Hartman írta:
>>>>>>"GÁL" == GÁL Balázs <balsa@rit.bme.hu> writes:
>
>
> GÁL> Tim Mooney írta:
> >> All- I'm looking for recommendations on which krb5 PAM module I
> >> should use on a sparc box I'll be reinstalling with Solaris 2.8
> >> in a couple weeks.
>
> GÁL> pam-krb5.sf.net. This is an enhanced version of RedHat's
> GÁL> pam_krb5. I will release rc8 in this weekend, it will
> GÁL> contains many workarounds for the solaris pam
> GÁL> implementation, so I recommend it.
>
> Hi. I have not looked at this specific implementation, but I have
> encountered the Redhat PAM module and would like to gvie astrong
> disrecommendation to that code base.
Sorry, but without any good reason I CANT agree this.
Please tell me concrete bugs!
Withouth these I can only request, that please
dont criticize anything whereof do you dont know enough well.
> It seems like the module does way too much
I dont think, that if a pam_krb5 module support
krb4 or afs should be a bug.
I think this features should be implemented in a pam_krb5
modul, rather than in a separate module.
> and has too much internal
> information about the Kerberos implementation.
Sorry, but I dont understand this. Whats the problem?
> In particular, it even
> parses krb5.conf (incorrectly).
This feature is deprecated and only compiled if requested.
balsa
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
