[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

Re: thinking about pam



Theodore Y. Ts'o:
> No, the GSSAPI is very much misunderstood.  The GSSAPI is a generic
> mechanism for handling client/server authentication, just as PAM is a
> generic mechanism for handling login authentication, authorization, and
> session management.  The two problem domains are distinct.  

Then, it would make sense to allow programs that work at
communications boundaries to cleanly support either PAM (new session)
or GSSAPI (continuation of remotely instantiated session).

-- 
Raul



[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index] []