Hello. I have not been on this list long, but I did a quick search on the
archive on pam..
For reasons stated below, I think of adding pam to cvs. My thought is that
it could be done by making "cvs login" more interactive and making the
serving cvs-process forward the pam-modules messages to the client via the
conv()-function.
This would require another name for the protocol to make cvs still be
compatible backwards. I suggest "pamserver". The communication between
client and server would be exactly like pserver; and all after the
authentication too. This would only be an "add-on" to pserver for those
wanting to use PAM.
I think this is the proper way to solve the problems on my company. I
hope I can convince them that; and I will do this on my job. I would like
to hear what you think of this. I haven't hacked in the cvs-code before;
but I suppose it is enough structured that I wouldn't have to learn it all
to insert an alternative in the authentication section.
I want PAM to verify because I have to setup a cvs-server linux that shall
serv the users of an NT-domain, and there are PAM-modules for
samba-authentications.
Regards, EOF