From owner-freebsd-current  Sun Jan 20 17:29: 0 2002
Delivered-To: freebsd-current@freebsd.org
Received: from nagual.pp.ru (pobrecita.freebsd.ru [194.87.13.42])
	by hub.freebsd.org (Postfix) with ESMTP id 01E1537B404
	for <current@FreeBSD.ORG>; Sun, 20 Jan 2002 17:28:57 -0800 (PST)
Received: (from ache@localhost)
	by nagual.pp.ru (8.11.6/8.11.6) id g0L1Sr328938;
	Mon, 21 Jan 2002 04:28:53 +0300 (MSK)
	(envelope-from ache)
Date: Mon, 21 Jan 2002 04:28:52 +0300
From: "Andrey A. Chernov" <ache@nagual.pp.ru>
To: Dag-Erling Smorgrav <des@ofug.org>
Cc: Mark Murray <mark@grondar.za>, current@FreeBSD.ORG
Subject: Re: Step5, pam_opie OPIE auth fix for review
Message-ID: <20020121012852.GB28808@nagual.pp.ru>
References: <20020120220254.GA25886@nagual.pp.ru> <200201202314.g0KNEDt34526@grimreaper.grondar.org> <20020120233050.GA26913@nagual.pp.ru> <xzpvgdw1sqp.fsf@flood.ping.uio.no> <20020121000446.GB27206@nagual.pp.ru> <xzpn0z81rrr.fsf@flood.ping.uio.no> <20020121002557.GB27831@nagual.pp.ru> <xzpelkk1qnb.fsf@flood.ping.uio.no> <20020121004906.GA28231@nagual.pp.ru> <xzp665w1otd.fsf@flood.ping.uio.no>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <xzp665w1otd.fsf@flood.ping.uio.no>
User-Agent: Mutt/1.3.24i
Sender: owner-freebsd-current@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-current.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-current>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-current>
X-Loop: FreeBSD.ORG

On Mon, Jan 21, 2002 at 02:21:34 +0100, Dag-Erling Smorgrav wrote:
> 
> I'm sorry, but in my opinion that should really be the admin's
> decision.  You can trust a machine without necessarily trusting users
> coming from that machine to pick good passwords.

I not advocate some my position here, I just explain how OPIE 
supposed to works, i.e. how people (sysadmins) know about it and know how 
to configure it. IMHO PAM transition should minimize differences with the 
documented and known by people way of how OPIE works. 

Generally speaking, you can submit your ideas to OPIE people and they may
add some per-user mechanism in future versions.

> No need.  See the attached patch.

Ok. I'll inform you after some testing.

-- 
Andrey A. Chernov
http://ache.pp.ru/

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-current" in the body of the message