[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

Re: pam_session bug?



>  My experience shows that placing auth() and setcred() calls in the same kind
>  is a fairly strong requirement.
>  I don't want to claim that applications MUST consider
>  the calls as of the same kind.
>  My suggestion is to mark the requirement you want under "MAY" so your
>  module should be able to work in any case.
>  Will it make a sense?

Ok, so here's the problem: you don't want to end up calling setcred in the
kerberos module if you haven't called authenticate, or rather, there's no point
to this behavior.

Replacing the MUST with MAY doesn't make sense to my reading; Can you amend as
approriate and/or post the relevant section?

-D



[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index] []