Hi Chris. I'm not aware of any way to have an authenticating application on one execution space and the PAM stack on another. As I understand it, the authenticating application has to invoke the PAM libraries directly, and there isn't any place to shim a network in between the two. Am I wrong?
For what it's worth, we home-rolled our own Solaris-compatible PAM module to do what pam_exec does on Linux, and while it works fine for login and ssh, it causes segfaults in dtlogin (both the stock Solaris dtlogin and the Sun Ray replacement version). We've tried for a while now to figure out what the trouble is but we're stumped, which is why we're taking a second look at Sun Ray on Linux. On Thu, May 06, 2010 at 09:19:27PM +0100, Chris Lawrence wrote: > Hi Michael, I can see you also asking about a Solaris pam_exec > equivalent last year, that was my first thought when I read this. Is > there a way you could perhaps deploy SRS/Solaris on the V220 and > offload, or pass through, the authentication to a small x86 box > running the specific PAM setup, in order to satisfy the time > constraints? Then plan a migration to an properly sized x86 server > for everything with the constraint out the way? I don't know much > about the PAM architecture so apologies if this is not doable but I > see that Solaris does have a PAM implementation so perhaps you can > offload or split the functionality at a higher level to obtain the > specific required auth functionality on a separate x86 box? > > Regards, > Chris > > > On 6 May 2010 20:46, Michael Jinks <[email protected]> wrote: > > I'm pretty sure the answer to this is "ha ha ha ha ha" but I have to > > ask... > > > > I have a legacy system running Sun Ray on an UltraSPARC server (Fire > > V220, FWIW). ?Due to time constraints and other issues I don't have the > > option of replacing that machine, but I need to have a modernized Sun > > Ray setup deployed in about a week. ?Our target setup requires the > > pam_exec module, which exists in Linux but not in Solaris, which means > > I'm looking at Sun Ray on RHEL. > > > > After a quick Google search it looks like there are projects to build > > Fedora for SPARC, but I'm betting that the Sun Ray binaries aren't > > available for that processor/OS combo. ?Any chance I might get lucky? > > > > Thanks, > > --Michael > > _______________________________________________ > > SunRay-Users mailing list > > [email protected] > > http://www.filibeto.org/mailman/listinfo/sunray-users > > > > > > -- > Regards, > Chris > _______________________________________________ > SunRay-Users mailing list > [email protected] > http://www.filibeto.org/mailman/listinfo/sunray-users _______________________________________________ SunRay-Users mailing list [email protected] http://www.filibeto.org/mailman/listinfo/sunray-users
