[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

Re: An interference between PAM and other libraries [was: Linux-PAM and syslog]



Hi Andrew and all,

On Mon, Mar 30, 1998 at 10:42:54PM -0800, Andrew Morgan wrote:
[snip]
> How to fix it?  This is the subject of another (shorter) email.
> 
> The other lesson to be drawn from this discussion is the importance of
> having a standard reference when trying to resolve issues of this
> nature.  It has been claimed that there is "no standard" solution to
> this problem.  The fact is that the Linux-PAM documentation does
> indicate a resolution.  Another fact is that this document carries no
> weight.  The original DCE-RFC has nothing to say on this issue, the
> single XSSO draft is less than useful.  Worse still, the original PAM
> developers are no longer available for comment.
> 
> I am more convinced than ever that we need to write an RFC that builds
> in all of our experiences so far.  Without something like this, PAM is
> destined to not be a viable approach to maintaining any reliable form
> of security.

I agree with you.
We need a paper describes PAM API for real programming which put restrictions
on both a PAM implementation and applications uses PAM.

[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index] []