Darren J Moffat wrote:
> What other PAM modules (from Linux-PAM or other places) would you like
> to see included in OpenSolaris distros (specifically in Solaris Express
> and the Indiana project distro) ?
From the screensaver point of view, the one Linux-PAM'ism that's bitten
us most lately is their changes to allow programs to call PAM without
root privileges when checking the current user's authentication (i.e.
in a unlock dialog), so that their screen lock doesn't have to be setuid
root and can use GTK without the split personality we've had to put into
our xscreensaver, and then fix the dozens of bugs it causes.
Their pam_unix module calls a setuid helper program to get your shadow
entry when needed - not sure if any other modules have or need privs.
--
-Alan Coopersmith- alan.coopersmith at sun.com
Sun Microsystems, Inc. - X Window System Engineering
