DJ Lucas wrote:
> On 06/26/2010 01:35 AM, DJ Lucas wrote:
>
>> Debian and Ubuntu
>> are explicitly denying in the common-{account,auth,password} files to
>> help and keep you from shooting yourself in the foot (accidental deny or
>> other unintended failure). The option exists to do conditionals, so it
>> would be something like the following for system-auth:
>
>> # if auth in pam_unix is successful, jump over the next 1 lines
>> auth [success=1 default=ignore] pam_unix.so
>> # if we get here, deny and die
>> auth requisite pam_deny.so
>> # if we get this far (no requisite), always permit
>> auth required pam_permit.so
>
>> Any interest in that failsafe in BLFS?
>
>
> Question still stands.
For me personally, I try to avoid pam completely. It just seems to get
in the way. I think it stems from the days of using rsh and related
functions when today ssh, sudo, and iptables can do the same thing in a
much cleaner way.
-- Bruce
--
http://linuxfromscratch.org/mailman/listinfo/blfs-dev
FAQ: http://www.linuxfromscratch.org/blfs/faq.html
Unsubscribe: See the above information page
