From owner-freebsd-hackers Tue Mar 10 18:04:51 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id SAA26074 for freebsd-hackers-outgoing; Tue, 10 Mar 1998 18:04:51 -0800 (PST) (envelope-from owner-freebsd-hackers@FreeBSD.ORG) Received: from dingo.cdrom.com (dingo.cdrom.com [204.216.28.145]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id SAA26047; Tue, 10 Mar 1998 18:04:39 -0800 (PST) (envelope-from mike@dingo.cdrom.com) Received: from dingo.cdrom.com (localhost [127.0.0.1]) by dingo.cdrom.com (8.8.8/8.8.5) with ESMTP id SAA21163; Tue, 10 Mar 1998 18:00:44 -0800 (PST) Message-Id: <199803110200.SAA21163@dingo.cdrom.com> X-Mailer: exmh version 2.0zeta 7/24/97 To: Mike Smith cc: Robert Watson , Mark Mayo , Andrzej Bialecki , tcobb@staff.circle.net, hackers@FreeBSD.ORG, msmith@FreeBSD.ORG Subject: Re: PAM? In-reply-to: Your message of "Tue, 10 Mar 1998 17:52:56 PST." <199803110152.RAA21109@dingo.cdrom.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Date: Tue, 10 Mar 1998 18:00:42 -0800 From: Mike Smith Sender: owner-freebsd-hackers@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG > > Ah, but it is! To support PAM, you have to modify your authenticating > > servers to support PAM. Many servers shipped with FreeBSD already support > > Kerberos due to the eBones and KTH distribution inclusion. If the goal is > > to support shared secret cards, then Kerberos can be used as a mechanism > > to carry the authentication request, and have tickets to carry around with > > you. > > No, it's not, and no, it can't. Oh *sigh*. I misread your argument. Yes, to support shared-secret cards, Kerberos should work just fine, and it would be a much more sensible vector to consider for FreeBSD systems. I couldn't actually recommend PAM for general use at this time. There are better special-purpose solutions available, and as a general-purpose solution PAM is not adequate. -- \\ Sometimes you're ahead, \\ Mike Smith \\ sometimes you're behind. \\ mike@smith.net.au \\ The race is long, and in the \\ msmith@freebsd.org \\ end it's only with yourself. \\ msmith@cdrom.com To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-hackers" in the body of the message