Chris Cowan writes:
>
> I don't know what the status of CDE vs VUE on HPUX 10 is, but some
> implementations of CDE support PAM (or something similar like AIX).
> Basically, PAM is an API defining how an UNIX OS utilize multiple
> authentication methods.
>
> If PAM is available, then it is simply a matter of preparing a dynamic
> lib with the correct functions exported. I believe that Roland
> Schemers from Sun was demoing PAM with AFS authentication, among other
> things, at Decorum '96. (You can probably get sample source from him).
> I believe he still follows this list.
>
I was demoing PAM with DCE, but it should work well with AFS. I did
test it out with DFS and made sure PAGs would work and that both
KRB5CCNAME and KRBTKFILE were exported if set by a PAM module. I'm
back at Stanford so I don't have access to any sample files. Once PAM
is released I'll probably have some for S/Key, Krb4/5 DCE, AFS, etc,
although I would think Transarc will have some PAM modules at some
point as well. I also think there is a free PAM port being done for
Linux. Ted Ts'o at MIT is leading/involved with it.
roland
