Date: Thu, 09 Jul 2015 13:35:52 -0500 From: Mark Felder <feld@FreeBSD.org> To: freebsd-security@freebsd.org Subject: Re: Where 3rd-party PAM modules should be placed? Message-ID: <1436466952.3471772.319701833.03042483@webmail.messagingengine.com> In-Reply-To: <559EB7E6.6040805@FreeBSD.org> References: <559EB7E6.6040805@FreeBSD.org>
next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, Jul 9, 2015, at 13:05, Lev Serebryakov wrote:
>
> `security/pam_ssh_agent_auth' installs PAM module
> (pam_ssh_agent_auth.so) into `${LOCALBASE}/lib', but
> `security/pam_yubico' and `security/oath-toolkit' install PAM modules
> into `${LOCALBASE}/lib/security'.
>
> And, by default on 10-STABLE, modules from
> `${LOCALBASE}/lib/security' can not be loaded by name (without full
> path) in PAM configuration file.
>
> Which place is correct? I like `${LOCALBASE}/lib/security', but using
> full pathnames looks ugly!
>
pam_google-authenticator also is installed into ${LOCALBASE}/lib
For the record, I've always used full path names in my /etc/pam.d files
to enable additional modules. Being able to use the short names would be
nice.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?1436466952.3471772.319701833.03042483>