William Yang wrote: > I filed one such RFE 2 years ago, but it remains in the dispatched state: > http://bugs.opensolaris.org/bugdatabase/view_bug.do?bug_id=6600145 > I recently filed support contract service request 71279098 against that CR as > well, but since it's an RFE... > > Additionally, I recently filed SR 71366128 for the minimum_uid feature, but > it is also an RFE. The support tech hasn't responded to me with a CR number > yet; should I just go ahead and file a bug on opensolaris.org bugster > directly? > > Of course the other thing I forgot to mention was that I am primarily using > Solaris 10 right now, and to get RFEs into that requires extra funding, I am > told. > > I'm pretty sure the 3rd party pam_krb5 can link to the Sun-provided Kerberos > stack as well, so it would be able to benefit from SCF if I chose to do that. > Unfortunately I am a mere part-time systems admin that is also a full-time > student, and the lack of sufficient developer skills to contribute > significant features to the code directly :( Seems the 3rd-party pam_krb5 is > my best option, at least until my RFEs get worked (SCF is a minor benefit in > my opinion, and official Sun support isn't very compelling since the > 3rd-party one is actively developed and functionally works fine, plus I've > seen only a handful of patches for it from Sun). > > Has Sun considered using the 3rd-party pam_krb5 as a code base, like is done > with GNOME and XScreenSaver? I feel like that might be the best of both > worlds, especially since that pam_krb5 has a huge user base since it is used > on many Linux distributions. >
We have been looking at a revamp of pam_krb5 in the near future. We will look at some of the issues that the min uid and non-default realm features address and define requirements to meet these underlying issues. Shawn. --
