From owner-freebsd-hackers@FreeBSD.ORG  Mon Mar 19 08:53:22 2007
Return-Path: <owner-freebsd-hackers@FreeBSD.ORG>
X-Original-To: freebsd-hackers@freebsd.org
Delivered-To: freebsd-hackers@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52])
	by hub.freebsd.org (Postfix) with ESMTP id 9EFBC16A40B
	for <freebsd-hackers@freebsd.org>; Mon, 19 Mar 2007 08:53:22 +0000 (UTC)
	(envelope-from sem@FreeBSD.org)
Received: from relay-er5.mbrd.ru (relay-er5.mbrd.ru [195.128.66.4])
	by mx1.freebsd.org (Postfix) with ESMTP id 3FF5713C4C3
	for <freebsd-hackers@freebsd.org>; Mon, 19 Mar 2007 08:53:22 +0000 (UTC)
	(envelope-from sem@FreeBSD.org)
Received: from msd.mbrd.ru ([172.16.33.193])
	by relay-er5.mbrd.ru with esmtpa (Exim 4.x) id 1HTDEg-000O9l-6J
	for freebsd-hackers@freebsd.org; Mon, 19 Mar 2007 11:28:58 +0300
Message-ID: <45FE49C8.9000602@FreeBSD.org>
Date: Mon, 19 Mar 2007 11:28:56 +0300
From: Sergey Matveychuk <sem@FreeBSD.org>
User-Agent: Thunderbird 1.5.0.10 (Windows/20070221)
MIME-Version: 1.0
To: freebsd-hackers@freebsd.org
Content-Type: text/plain; charset=KOI8-R
Content-Transfer-Encoding: 7bit
Subject: passwd: what problem to allow to try PAM?
X-BeenThere: freebsd-hackers@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Technical Discussions relating to FreeBSD
	<freebsd-hackers.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-hackers>, 
	<mailto:freebsd-hackers-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-hackers>
List-Post: <mailto:freebsd-hackers@freebsd.org>
List-Help: <mailto:freebsd-hackers-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-hackers>,
	<mailto:freebsd-hackers-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 19 Mar 2007 08:53:22 -0000

Hi!

passwd(1) now disallow changing a password via PAM. Why? Is there some
hidden reason like a security one or something I missed?

Here is code:

        /* check where the user's from */
        switch (pwd->pw_fields & _PWF_SOURCE) {
        case _PWF_FILES:
                fprintf(stderr, "Changing local password for %s\n",
                    pwd->pw_name);
                break;
        case _PWF_NIS:
                fprintf(stderr, "Changing NIS password for %s\n",
                    pwd->pw_name);
                break;
        default:
                /* XXX: Green men ought to be supported via PAM. */
                errx(1,
          "Sorry, `passwd' can only change passwords for local or NIS
users.");
        }

A comment about green men discouraged, PAM calls are bellow.
-- 
Dixi.
Sem.