Re: Please make pam-hooks available in Debian

[Petter Reinholdtsen <pere@hungry.com>]

[Petter Reinholdtsen]
> Hi.  I saw your announcement of pam-hooks, and your request for
> comments if this would be useful in Debian.  I believe it would be
> very useful in Debian Edu, so please upload it to Debian. :)
> 
>   <URL:http://upsilon.cc/~zack/blog/posts/2008/01/PAM_hooks/>
>   <URL:http://upsilon.cc/~zack/hacking/software/pam-hooks/>

I had a closer look at the source, and one thing occured to me.  It
could be easier to use if it would run scripts in a well known .d
directory, thus allowing other packages to slip in scripts that should
run at login and logout.  What about documenting and recommending a
predefined path like /etc/pam-hooks.d/, and by default call run-parts
/etc/pam-hooks.d from the pam module?

This way, the debian-edu-config package could provide a script in
/etc/pam-hooks.d/ to do the setup and cleanup needed by Debian Edu,
and once PAM is properly set up, it would be enough to activate the
scripts.

Here is a patch to let the sample file include the proposed setting:

--- pam-hooks-0.0.1.orig/test/sample_pam.d_line
+++ pam-hooks-0.0.1/test/sample_pam.d_line
@@ -1 +1 @@
-session required pam_hooks.so /some/where/hook.sample param1 param2
+session required pam_hooks.so /bin/run-parts /etc/pam-hooks.d

I guess the README file should be updated to recommend this default as
well.

Happy hacking,
-- 
Petter Reinholdtsen