Re: [Proposal] Forget PAM, stick with NSS
On 31 Jul 1999, Goswin Brederlow wrote:
> Matt Ryan <matt@banana.org.uk> writes:
>
> > I'm a big fan of small dependancies for packages. I can't see any reason why
> > we should start PAMifing packages when AFAICS it only gives the same
> > functionality as the NSS part of glibc. I have setup libnss-ldap and it works
> > very well - why would I need PAM?
>
> Can nss fallback or use pam?
>
> Otherwise I will still need pam for afs? Since afs is not free,
> changing is probably impossible.
NSS is not nearly as functional as full pam functionality. A simple
example, I have a written a pam module (libpam-mkhomedir) that creates the
users home directory if it does not exist on login, using PAM I have
plugged it into SSH and login, I then replicate the shadow/passwd/group
files to all the machines and don't have to worry about home directory
creation. You cannot do that with nss.
There are many things that cannot be done with only nss that pam
addresses.
Jason
Reply to: