Subject: Re: PAM
To: Dan Melomedman <dan%dan.dan@devonit.com>
From: Jaromir Dolecek <jdolecek@netbsd.org>
List: current-users
Date: 09/25/2002 20:56:26
Dan Melomedman wrote:
> Kerberos would work just fine with an exec chain design. And I am still
> not sure why AFS wouldn't. You simply modify process state through
> environment, then executed job would do its thing.
Nobody is going to rewrite all programs needing authentication to do
exec chain. That's just not realistic. And I seriously doubt code
using exec chain would be sanely maintainable.
Jaromir
--
Jaromir Dolecek <jdolecek@NetBSD.org> http://www.NetBSD.org/
-=- We should be mindful of the potential goal, but as the tantric -=-
-=- Buddhist masters say, ``You may notice during meditation that you -=-
-=- sometimes levitate or glow. Do not let this distract you.'' -=-