Re: PAM/NSS Policy et al
I think you bring up some good points but I don't think we're prepared
to address them now; we're in the middle of a release freeze and the
packages dealing with PAM and NSS are mostly frozen at this point.
Also, as a matter of practice Debian tends to codify things in policy
after they are stable enough and the right way to do things is well
enough understood that we can be reasonably sure that our policy makes
forward progress. I don't think we're at all close on eith PAM or NSS
configuration. In the case of PAM, I don't even think we have the
technical support we need to accomplish that goal.
Certainly dealing with many of the issues you bring up is something I
plan to do for PAM after woody is released. Long term I'll also be
interested in integrating the NSS configuration. I'm not fully sure
I'll want to do enough up-front work to do both PAM and NSS
configuration all at once. NSS is somewhat more complex , is more
restricted than PAM configuration, and I think may require more thought.
Reply to: