Armin K. wrote:
On 29.05.2015 02:29, Bruce Dubbs wrote:
I've been working on KDE's new Frameworks (kf5) and Plasma systems. There, and a few
other places, I've found they really want PAM to be installed. The PAM page has an
"Important" note that says re-installation of shadow is needed.
That's not really needed if you don't want the shadow programs to be encumbered
with PAM.
In any case, I installed PAM without rebuilding shadow, but ran into a
configuration problem. What we have now is PAM configuration instructions at
the end of the shadow page.
My question is whether we should move those PAM configuration instructions to
the PAM page?
-- Bruce
Not all of it.
It would make sense to move /etc/pam.d/system-{account,auth,password,session}
and /etc/pam.d/other.
Those are the files that can be shared by PAM services.
Agree.
The rest are config files specific to programs installed by shadow and that
would make no sense
to move to the PAM page if shadow isn't reinstalled.
Note however, openssh (and maybe sudo too) assume that if PAM was installed,
shadow config
files were installed too and they use shadow config file to create their own.
That should
be handled differently if you are to change instructions.
That's a good point, but it depends on the order of installation. For
me, I always install ssh and sudo within my first 5 BLFS packages.
They will not be contaminated with PAM. I know others will have
different thoughts about this.
-- Bruce
--
http://lists.linuxfromscratch.org/listinfo/blfs-dev
FAQ: http://www.linuxfromscratch.org/blfs/faq.html
Unsubscribe: See the above information page
