[8423] in Info-AFS_Redistribution
AFS 3.6, PAM, Solaris, "optional" !!??
daemon@ATHENA.MIT.EDU (Jeff Blaine)
Tue Jan 23 11:38:42 2001
Date: Tue, 23 Jan 2001 11:05:29 -0500
From: Jeff Blaine <jblaine@linus.mitre.org>
To: info-afs@transarc.com
Message-ID: <995386292.980247929@jblaine-pc.mitre.org>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
The AFS 3.6 Quick Beginnings documentation (aka The Installation Guide...
*smirk*) states to use 'optional' for everything in the Solaris
/etc/pam.conf
Solaris PAM will make sure that one of the modules succeeds if they are
all marked as 'optional', but why is this requirement in place? This
seems very broken to me.
So broken, in fact, that in our testbed cell I changed ours to be:
login auth sufficient /usr/lib/security/pam_afs.so
login auth required /usr/lib/security/pam_unix.so.1
And it works perfectly fine.
What is going on here? Could someone from Transarc (or anyone else)
explain this?
