PAM Design Question

[Thorsten Kukuk]

On Tue, Apr 21, R Coley wrote:

> I have a couple of design questions..
> 
> Firstly, is there any guarantees (ie. Is it a documented standard)  
> regarding the order that the pam framework calls the pam module  
> functions? Can you safely assume across all platforms that it is in  
> the order specified in the config file?

Depends. For a type like auth, acct, password, session, the modules
will be called in the order you define in the config file.

The order of auth, acct, password, session depends on the implementation
of the calling application.
 
> My second question regards perhaps extending login functionality, to   
> perform account lockout upon failed authentication.

Exists already in Linux-PAM: pam_tally2

Maybe you should start reading the PAM documentation?

  Thorsten

-- 
Thorsten Kukuk, Project Manager/Release Manager SLES
SUSE LINUX Products GmbH, Maxfeldstr. 5, D-90409 Nuernberg
GF: Markus Rex, HRB 16746 (AG Nuernberg)