> And of course, it should be possible to reject a login altogether,
> say if you don't want somebody logging in on a certain port, from
> a certain host, at a certain time, whatever (all at the discretion
> of the called external command of course). Perhaps the program should
> get fds for the terminal (and the network connection, if any) so
> that it could test or manipulate them.

This is an orthogonal problem, and, in my opinion, one that should be
solved using login classes, not this mechanism.


cgd