Date: Sun, 24 Jan 1999 04:04:37 +0100 (CET) From: Andrzej Bialecki <abial@nask.pl> To: Peter Wemm <peter@netplex.com.au> Cc: Mark Murray <mark@grondar.za>, Sheldon Hearn <axl@iafrica.com>, brandon@FreeBSD.ORG, committers@FreeBSD.ORG Subject: Re: New crypt code is not sucessful Message-ID: <Pine.BSF.4.02A.9901240356330.14247-100000@korin.warman.org.pl> In-Reply-To: <199901240216.KAA01228@spinner.netplex.com.au>
next in thread | previous in thread | raw e-mail | index | archive | help
On Sun, 24 Jan 1999, Peter Wemm wrote:
> Andrzej Bialecki wrote:
> > On Sun, 24 Jan 1999, Peter Wemm wrote:
> >
> > > Speaking of rehashing.. I wonder what the chances of having the password
> > > verification stages of login (or PAM) rehashing the passwords on a
> > > successful login would be?
> >
> > If I'm not mistaken, it's only a matter of writing a PAM module that would
> > do this.
>
> As I understand it, it has to be done by the module that actually asked for
> and got the password. Adding an extra module in the sequence would (I
> believe) mean that it would have to ask for the password again.. I think..
> It depends on whether there is any caching, and at what level the cache is
> held.
Again, if I'm not mistaken ;) you can call directly the next module in
chain from inside the rewriting module. The caching would be done in the
rewriting module then:
...
getpass
-> pam_rehash:
check format
-> (needs rehashing): call the old handler to check it, then convert
-> (doesn't need): call the new handler directly
return code
...
Andrzej Bialecki
-------------------- ++-------++ -------------------------------------
<abial@nask.pl> ||PicoBSD|| FreeBSD in your pocket? Go and see:
Research & Academic |+-------+| "Small & Embedded FreeBSD"
Network in Poland | |TT~~~| | http://www.freebsd.org/~picobsd/
-------------------- ~-+==---+-+ -------------------------------------
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.02A.9901240356330.14247-100000>