Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 7 Jan 2002 03:53:16 +0300
From:      "Andrey A. Chernov" <ache@nagual.pp.ru>
To:        Mark Murray <mark@grondar.za>
Cc:        current@FreeBSD.ORG
Subject:   Re: Question to PAM hackers
Message-ID:  <20020107005314.GD41085@nagual.pp.ru>
In-Reply-To: <200201051121.g05BL9V52739@grimreaper.grondar.org>
References:  <20020104075611.GA11377@nagual.pp.ru> <200201051121.g05BL9V52739@grimreaper.grondar.org>

next in thread | previous in thread | raw e-mail | index | archive | help
On Sat, Jan 05, 2002 at 13:21:08 +0200, Mark Murray wrote:
> > Is there a way (i.e. interface function) to check if particular PAM module 
> > loaded, inside application?
> 
> No. Annd nor should there be. The authentication process with PAM means
> that the authentication policy (including which modules are loaded) are
> none of the applications damn business :-)

Chaining as concept is poor when conditionalized modules handling is needed.
F.e. currently it is impossible to write proper pam_opie and pam_unix
interaction using just chaining even they appearse always in fixed order. As
workaround pam_unix forced to be removed and handled by application itself.

-- 
Andrey A. Chernov
http://ache.pp.ru/

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-current" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20020107005314.GD41085>