[1518] in athena10
Re: libpam-krb5-config broken under Jaunty
daemon@ATHENA.MIT.EDU (Tim Abbott)
Tue Mar 10 23:22:15 2009
Date: Tue, 10 Mar 2009 23:21:26 -0400 (EDT)
From: Tim Abbott <tabbott@MIT.EDU>
To: Greg Price <price@mit.edu>
cc: Evan Broder <broder@mit.edu>, Geoffrey Thomas <geoffrey@mit.edu>,
debathena@mit.edu
In-Reply-To: <20090311030851.GL25963@mit.edu>
Message-ID: <alpine.DEB.1.10.0903102320480.17034@vinegar-pot.mit.edu>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
On Tue, 10 Mar 2009, Greg Price wrote:
> To summarize this possibly more clearly for people without full
> context, Intrepid introduced a new order of things for PAM
> configuration, with the name pam-auth-update; I adapted our PAM config
> to this form, which includes supplying static config files in
> /usr/share/pam-configs/ that can be turned on or off by the sysadmin;
> then it looks like in Jaunty, libpam-krb5 upstream supplies a krb5
> config file with the obvious name, the same one I used.
>
>
> Evan and I looked at this last night. Among other things, the
> /usr/share/pam-configs/krb5 in the new libpam-krb5 only acts for
> uid >= 1000. It'd be nice if that worked for us, but right now it
> doesn't.
>
> Unfortunately pam-auth-update reads every file in
> /usr/share/pam-configs/ other than . and .., so diverting will be a
> pain. I can probably get the maintainer to take a patch to use
> run-parts semantics, which is the Debian Way for this sort of thing.
> Not sure that would happen for jaunty.
Can't we use DEB_REMOVE_FILES to disable their configuration for now?
-Tim Abbott
