NSS and PAM, dynamic vs. static (was: 40% slowdown with dynamic
/bin/sh)
Jacques A. Vidrine
nectar at FreeBSD.org
Wed Nov 26 05:04:07 PST 2003
On Wed, Nov 26, 2003 at 02:00:08AM +0100, Matthias Andree wrote:
> Matthew Dillon <dillon at apollo.backplane.com> writes:
>
> > How much do you intend to use NSS for? I mean, what's the point of
> > adopting this cool infrastructure if all you are going to do with it
> > is make a better PAM out of it?
>
> The important thing is that NSS allows to plug modules such as LDAP or
> PostgreSQL for user base management. PAM is only halfway there and
> doesn't give libc et al. a notion of a user or group context (in spite
> of its "account" context), NSS does. One might discuss if PAM is really
> needed with NSS in place, but it's hard to think of a system without
> NSS and removing PAM now doesn't look right.
NSS and PAM do not overlap. They are complimentary and one cannot do
the job of the other.
Cheers,
--
Jacques Vidrine NTT/Verio SME FreeBSD UNIX Heimdal
nectar at celabo.org jvidrine at verio.net nectar at freebsd.org nectar at kth.se
More information about the freebsd-current
mailing list