[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: PAM config via Debconf



>>>>> "Matthew" == Matthew Palmer <mjp16@ieee.uow.edu.au> writes:


    Matthew> but I see that PAM
    Matthew> configuration is pretty bodgy at present.  I'm thinking
    Matthew> that a method of maintaining PAM configs in a more
    Matthew> automatic vein cannot be a bad thing, if it can be done.

Hi.  I'm the PAM maintainer.  I actually would have appreciated it if
you'd copied pam@packages.debian.org on this.

Short answer: not for woody.  PAM is frozen and short of really
serious bugs I will not be uploading any more 0.72-based versions.

After woody ships, I'll be working on bringing our PAM up to whatever
the mainstream ships at that point in time.

Once I do that I'll work on using pam_stack, some sort of include
mechanism, etc to allow applications to avoid specifying so much
information in their PAM configurations and to be able to use system
defaults.

Then I'll work on allowing these defaults to be configured, quite
likely via debconf.  There are some interesting usability issues to
consider having to do with installation order, minimizing questions,
etc.


As I get closer to implementation I'll send out some details.

Right now, since PAM configs are conffiles you cannot touch them with
debconf.  Changing this for woody would not be acceptable.



Reply to: