NSS and PAM, dynamic vs. static (was: 40% slowdown with dynamic /bin/sh)

Jacques A. Vidrine nectar at FreeBSD.org
Wed Nov 26 05:04:07 PST 2003

On Wed, Nov 26, 2003 at 02:00:08AM +0100, Matthias Andree wrote:
> Matthew Dillon <dillon at apollo.backplane.com> writes:
> >     How much do you intend to use NSS for?  I mean, what's the point of
> >     adopting this cool infrastructure if all you are going to do with it
> >     is make a better PAM out of it?
> The important thing is that NSS allows to plug modules such as LDAP or
> PostgreSQL for user base management. PAM is only halfway there and
> doesn't give libc et al. a notion of a user or group context (in spite
> of its "account" context), NSS does. One might discuss if PAM is really
> needed with NSS in place, but it's hard to think of a system without
> NSS and removing PAM now doesn't look right.

NSS and PAM do not overlap.  They are complimentary and one cannot do
the job of the other.

Jacques Vidrine   NTT/Verio SME      FreeBSD UNIX       Heimdal
nectar at celabo.org jvidrine at verio.net nectar at freebsd.org nectar at kth.se

More information about the freebsd-current mailing list