[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Bug#173522: ITP: pamconf -- PAM configuration framework for Debian

At Wed, 18 Dec 2002 04:00:11 -0600,
Steve Langasek wrote:

> > >  Pamconf provides debconf questions for configuring
> > >  PAM configurations. It manages several PAM services.
> > >  You can share PAM configurations on several Debian
> > >  systems by sharing debconf questionts. This makes
> > >  it easy to administrate several Debian systems with
> > >  the same PAM policy.
> > 	How is configuration handled? Is this package going to
> > change the PAM configuration for, for example, the Samba module? [0]
> > Isn't this against policy? [1]
> > [0] $ dpkg -S /etc/pam.d/samba
> > samba-common: /etc/pam.d/samba
> > [1] http://www.debian.org/doc/debian-policy/ch-files.html#s-config-files
> Also, has this been discussed with the PAM maintainer?  Sam has indicated
> to me that he believes Debian's handling of common PAM config needs to be
> improved, 

 Not yet.

> but I would expect that to require fixes within the libpam0g
> package before anything else.

The solution which pamconf provides is nothing but one of solutions
to manage PAM configurations. It provides the same form of questions
for configuring several PAM services. i.e. It doesn't provide other meta
configurations such that we use LDAP to login for every service
(login, ssh, etc). I guess that it may takes quite a long time to
define meta configurations. Because I don't know which framework the
Debian PAM package should support, I created another package to
configure PAM files, whose priority is optional and which packages 
that use PAM only suggest.

Reply to: