Subject: Re: PAM
To: NetBSD-current Discussion List <current-users@NetBSD.ORG>
From: Gary Thorpe <gathorpe79@yahoo.com>
List: current-users
Date: 09/23/2002 15:00:35
--- "Greg A. Woods" <woods@weird.com> wrote:
> [ On Sunday, September 22, 2002 at 19:22:50 (-0400),
> Gary Thorpe wrote: ]
> > Subject: Re: PAM
> >
> > What about systems that CANNOT be rebooted every
> time
> > you want to add capabilities? Reconfigure and
> > reboot...sounds like Windows, not UNIX (at least
> not
> > modern UNIX).
>
> I'm sorry, but that's so bogus it barely deserves an
> answer.
>
> If you can't plan for scheduled _and_ unscheduled
> downtime of your
> systems then you've got way larger problems than PAM
> can ever solve!
>
> Changing authentication schemes is not something you
> should be ever
> allowed to do lightly and without very deep
> consideration and planning.
>
> Besides, who the heck said you have to reboot just
> to re-install some
> simple static-linked software. "Sounds more like
> Windows to me!"
>
> It's not even impossible to consider restarting
> 'init' from a new
> executable in a high availability scenario! Just
> signal it to save its
> state and re-exec! Why would you even dream that a
> reboot would be
> needed on a unix system to change static-linked
> software!?!?!?
>
> --
> Greg A. Woods
>
> +1 416 218-0098; <g.a.woods@ieee.org>;
> <woods@robohack.ca>
> Planix, Inc. <woods@planix.com>; VE3TCP; Secrets of
> the Weird <woods@weird.com>
You're right, I was thinking more of kernel modules
(which are even more EviL and BaD). Regardless, PAM is
easier: build/download new modules, copy new modules
to a directory. No recompile, no restarting. Which is
less time-consuming?
______________________________________________________________________
Post your free ad now! http://personals.yahoo.ca