From owner-freebsd-arch  Wed May 30  5:48: 5 2001
Delivered-To: freebsd-arch@freebsd.org
Received: from gw.nectar.com (gw.nectar.com [208.42.49.153])
	by hub.freebsd.org (Postfix) with ESMTP id 6ABD037B422
	for <arch@FreeBSD.ORG>; Wed, 30 May 2001 05:48:02 -0700 (PDT)
	(envelope-from nectar@nectar.com)
Received: by gw.nectar.com (Postfix, from userid 1001)
	id 044F818C98; Wed, 30 May 2001 07:47:57 -0500 (CDT)
Date: Wed, 30 May 2001 07:47:57 -0500
From: "Jacques A. Vidrine" <n@nectar.com>
To: Terry Lambert <tlambert2@mindspring.com>
Cc: Sheldon Hearn <sheldonh@starjuice.net>,
	Mark Murray <mark@grondar.za>, arch@FreeBSD.ORG
Subject: Re: PAM, S/Key and authentication schemes.
Message-ID: <20010530074757.A53937@spawn.nectar.com>
References: <89661.990794824@axl.fw.uunet.co.za> <3B14B109.C08F1970@mindspring.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.2.5i
In-Reply-To: <3B14B109.C08F1970@mindspring.com>; from tlambert2@mindspring.com on Wed, May 30, 2001 at 01:36:25AM -0700
X-Url: http://www.nectar.com/
Sender: owner-freebsd-arch@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-arch.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo?subject=subscribe%20freebsd-arch>
List-Unsubscribe: <mailto:majordomo?subject=unsubscribe%20freebsd-arch>
X-Loop: FreeBSD.ORG

On Wed, May 30, 2001 at 01:36:25AM -0700, Terry Lambert wrote:
> We talked to the Sun guy who came up with PAM at the last
> FreeBSD user's group meeting, in Foster City, CA, last
> month.
> 
> The PAM API, as it currently sits, is incapable of correctly
> supporting Kerberos, and several other authentication schemes.
> 
> Apparently, the only way to fix this is to change the PAM API.

Hey, I'm glad that has sunk in. We debated about this back in February
(thread in this forum containing Message-ID
<20010217190800.A38833@spawn.nectar.com>).

Moreover, I  think Mark already  understands this, and in  this thread
when  `authentication' appears,  it should  almost always  be read  as
`interactive  authentication' e.g.  enter  a secret  or  respond to  a
challenge or such.

Cheers,
-- 
Jacques Vidrine / n@nectar.com / jvidrine@verio.net / nectar@FreeBSD.org

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-arch" in the body of the message