From owner-freebsd-arch  Fri Jun  1 10: 0:36 2001
Delivered-To: freebsd-arch@freebsd.org
Received: from granger.mail.mindspring.net (granger.mail.mindspring.net [207.69.200.148])
	by hub.freebsd.org (Postfix) with ESMTP id 8617A37B424
	for <arch@FreeBSD.ORG>; Fri,  1 Jun 2001 10:00:34 -0700 (PDT)
	(envelope-from tlambert2@mindspring.com)
Received: from mindspring.com (dialup-209.245.138.21.Dial1.SanJose1.Level3.net [209.245.138.21])
	by granger.mail.mindspring.net (8.9.3/8.8.5) with ESMTP id NAA22728;
	Fri, 1 Jun 2001 13:00:01 -0400 (EDT)
Message-ID: <3B17CA2C.D68B9583@mindspring.com>
Date: Fri, 01 Jun 2001 10:00:28 -0700
From: Terry Lambert <tlambert2@mindspring.com>
Reply-To: tlambert2@mindspring.com
X-Mailer: Mozilla 4.7 [en]C-CCK-MCD {Sony}  (Win98; U)
X-Accept-Language: en
MIME-Version: 1.0
To: "Jacques A. Vidrine" <n@nectar.com>
Cc: Sheldon Hearn <sheldonh@starjuice.net>,
	Mark Murray <mark@grondar.za>, arch@FreeBSD.ORG
Subject: Re: PAM, S/Key and authentication schemes.
References: <89661.990794824@axl.fw.uunet.co.za> <3B14B109.C08F1970@mindspring.com> <20010530074757.A53937@spawn.nectar.com>
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Sender: owner-freebsd-arch@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-arch.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo?subject=subscribe%20freebsd-arch>
List-Unsubscribe: <mailto:majordomo?subject=unsubscribe%20freebsd-arch>
X-Loop: FreeBSD.ORG

"Jacques A. Vidrine" wrote:
> On Wed, May 30, 2001 at 01:36:25AM -0700, Terry Lambert wrote:
> > We talked to the Sun guy who came up with PAM at the last
> > FreeBSD user's group meeting, in Foster City, CA, last
> > month.
> >
> > The PAM API, as it currently sits, is incapable of correctly
> > supporting Kerberos, and several other authentication schemes.
> >
> > Apparently, the only way to fix this is to change the PAM API.
> 
> Hey, I'm glad that has sunk in. We debated about this back in February
> (thread in this forum containing Message-ID
> <20010217190800.A38833@spawn.nectar.com>).

Knowing about the problem, and actually revising the API
to deal with it, are two very different things, unfortuantely.

-- Terry

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-arch" in the body of the message