Date: Mon, 21 Jan 2002 03:35:49 +0300 From: "Andrey A. Chernov" <ache@nagual.pp.ru> To: Mark Murray <mark@grondar.za> Cc: Dag-Erling Smorgrav <des@ofug.org>, current@FreeBSD.ORG Subject: Re: Step5, pam_opie OPIE auth fix for review Message-ID: <20020121003547.GA28007@nagual.pp.ru> In-Reply-To: <200201210029.g0L0TTt35104@grimreaper.grondar.org> References: <20020121001822.GA27831@nagual.pp.ru> <200201210029.g0L0TTt35104@grimreaper.grondar.org>
next in thread | previous in thread | raw e-mail | index | archive | help
On Mon, Jan 21, 2002 at 00:29:29 +0000, Mark Murray wrote: > > "sufficient" will not works due to IGNORE assigned to AUTH_ERR reaction. > > > > [default=ignore success=done auth_err=die] > > > > works. > > > > Do you agree with this variant? > > Eeew. It may work, but it is really a last-ditch sort of thing. What you dislike in that way? This method fully described in pam(8). I see no differences using short forms like "sufficient" or its full long analog like "[default=ignore sucess=done new_authtok_reqd=done]" short forms are only aliases. > I much prefer an option that specifies the behaviour. I not understand enough what kind of option you mean exactly, where it whould be and how act exactly. -- Andrey A. Chernov http://ache.pp.ru/ To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-current" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20020121003547.GA28007>