Re: severe deficiencies in our PAM setup

[Martin Keegan <mk270@cam.ac.uk>]

In debian-devel, you wrote:

>  True, but there is also no concept of a "standard" service.  Things
>required for some things(pam_securetty) make absolutly no sense for say,
>imap or samba.  And I'm a little leary about something posing as a, say,
>kbdrate service being able to change passwords.  

pam_unix.so does this for you IF you can use things supported by libc's
NSS as your backends. What's wanted is a pam_standard.so which knows
what the standard policy for the system is, which can be augmented by
the bits you need for securettys etc.

Mk