NSS and PAM (was Re: NSS and PAM, dynamic vs. static)

[Jacques A. Vidrine]

[Threading intentionally broken.]

On Sat, Nov 29, 2003 at 01:16:25AM +0100, Dag-Erling Smørgrav wrote:
> "Jacques A. Vidrine" <nectar at FreeBSD.org> writes:
> > NSS and PAM do not overlap.  They are complimentary and one cannot do
> > the job of the other.
> 
> That is a bug in NSS, PAM or both.

Interesting.  Explain, please.  (Maybe privately or in another thread;
hate to keep this'n going.)  Perhaps you mean that it is a design flaw
that two APIs are required.  If so, I happen to disagree; I think that
the separation of directory services and authentication is appropriate
and necessary.

> (BTW, I think you mean that they are complementary, not complimentary,
> although it is certainly true that some implementations of NSS and PAM
> are free)

heh, Yes, that's a spell-o from which spell-check could not save me.

Cheers,
-- 
Jacques Vidrine   NTT/Verio SME      FreeBSD UNIX       Heimdal
nectar at celabo.org jvidrine at verio.net nectar at freebsd.org nectar at kth.se