From owner-freebsd-current Sun Jan 20 16:36: 1 2002 Delivered-To: freebsd-current@freebsd.org Received: from nagual.pp.ru (pobrecita.freebsd.ru [194.87.13.42]) by hub.freebsd.org (Postfix) with ESMTP id 2D5FD37B400 for ; Sun, 20 Jan 2002 16:35:58 -0800 (PST) Received: (from ache@localhost) by nagual.pp.ru (8.11.6/8.11.6) id g0L0ZqR28108; Mon, 21 Jan 2002 03:35:52 +0300 (MSK) (envelope-from ache) Date: Mon, 21 Jan 2002 03:35:49 +0300 From: "Andrey A. Chernov" To: Mark Murray Cc: Dag-Erling Smorgrav , current@FreeBSD.ORG Subject: Re: Step5, pam_opie OPIE auth fix for review Message-ID: <20020121003547.GA28007@nagual.pp.ru> References: <20020121001822.GA27831@nagual.pp.ru> <200201210029.g0L0TTt35104@grimreaper.grondar.org> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <200201210029.g0L0TTt35104@grimreaper.grondar.org> User-Agent: Mutt/1.3.24i Sender: owner-freebsd-current@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG On Mon, Jan 21, 2002 at 00:29:29 +0000, Mark Murray wrote: > > "sufficient" will not works due to IGNORE assigned to AUTH_ERR reaction. > > > > [default=ignore success=done auth_err=die] > > > > works. > > > > Do you agree with this variant? > > Eeew. It may work, but it is really a last-ditch sort of thing. What you dislike in that way? This method fully described in pam(8). I see no differences using short forms like "sufficient" or its full long analog like "[default=ignore sucess=done new_authtok_reqd=done]" short forms are only aliases. > I much prefer an option that specifies the behaviour. I not understand enough what kind of option you mean exactly, where it whould be and how act exactly. -- Andrey A. Chernov http://ache.pp.ru/ To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-current" in the body of the message