[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

Re: pam_session bug?



On Sat, 9 May 1998, Savochkin Andrey Vladimirovich wrote:

> 1.1. Modules MUST NOT expect that PAM functions of different kinds
>      will be called from the same process. Application MAY
>      fork() and call PAM functions of different kinds from different
>      processes.
> 
>      The kinds are:
>         - pam_authenticate()
>         - pam_acct_mgmt() and pam_chauthtok()
>         - pam_open_session() and pam_close_session()
>         - pam_setcred().

Since setcred is part of the auth portion of the module, I would argue
that pam_authenticate and pam_setcred are a single kind. not doing this
means incredible evil must be done in certain cases, and solaris at least
appears to already comply

-D




[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index] []