Re: NSS and PAM (was Re: NSS and PAM, dynamic vs. static)

2003-11-29 Thread slave-mike
why does /bin/sh need NSS support?
Jacques A. Vidrine wrote:
[Threading intentionally broken.]

On Sat, Nov 29, 2003 at 01:16:25AM +0100, Dag-Erling Sm?rgrav wrote:

Jacques A. Vidrine [EMAIL PROTECTED] writes:

NSS and PAM do not overlap.  They are complimentary and one cannot do
the job of the other.
That is a bug in NSS, PAM or both.


Interesting.  Explain, please.  (Maybe privately or in another thread;
hate to keep this'n going.)  Perhaps you mean that it is a design flaw
that two APIs are required.  If so, I happen to disagree; I think that
the separation of directory services and authentication is appropriate
and necessary.

(BTW, I think you mean that they are complementary, not complimentary,
although it is certainly true that some implementations of NSS and PAM
are free)


heh, Yes, that's a spell-o from which spell-check could not save me.

Cheers,


--
---
I'm a UNIX Kinda Guy.
My websites:

http://slavepix.dyns.net/
http://jaxleather.dyns.net/
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-current
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: NSS and PAM (was Re: NSS and PAM, dynamic vs. static)

2003-11-29 Thread Dag-Erling Smørgrav
slave-mike [EMAIL PROTECTED] writes:
 why does /bin/sh need NSS support?

Because /bin/sh uses getpwnam().  We've been through this before.

DES
-- 
Dag-Erling Smørgrav - [EMAIL PROTECTED]
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-current
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: NSS and PAM (was Re: NSS and PAM, dynamic vs. static)

2003-11-29 Thread Richard Coleman
slave-mike wrote:

why does /bin/sh need NSS support?
1. If you are using pam_ldap, tilde expansion will be broken in /bin/sh 
without nss_ldap support.
2. Tilde expansion is required for POSIX conformance.

It's not the strongest rationale.  But it's something to consider.

Richard Coleman
[EMAIL PROTECTED]
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-current
To unsubscribe, send any mail to [EMAIL PROTECTED]


NSS and PAM (was Re: NSS and PAM, dynamic vs. static)

2003-11-28 Thread Jacques A. Vidrine
[Threading intentionally broken.]

On Sat, Nov 29, 2003 at 01:16:25AM +0100, Dag-Erling Smørgrav wrote:
 Jacques A. Vidrine [EMAIL PROTECTED] writes:
  NSS and PAM do not overlap.  They are complimentary and one cannot do
  the job of the other.
 
 That is a bug in NSS, PAM or both.

Interesting.  Explain, please.  (Maybe privately or in another thread;
hate to keep this'n going.)  Perhaps you mean that it is a design flaw
that two APIs are required.  If so, I happen to disagree; I think that
the separation of directory services and authentication is appropriate
and necessary.

 (BTW, I think you mean that they are complementary, not complimentary,
 although it is certainly true that some implementations of NSS and PAM
 are free)

heh, Yes, that's a spell-o from which spell-check could not save me.

Cheers,
-- 
Jacques Vidrine   NTT/Verio SME  FreeBSD UNIX   Heimdal
[EMAIL PROTECTED] [EMAIL PROTECTED] [EMAIL PROTECTED] [EMAIL PROTECTED]
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-current
To unsubscribe, send any mail to [EMAIL PROTECTED]