Subject: Re: PAM
To: Dan Melomedman <dan%dan.dan@devonit.com>
From: Jaromir Dolecek <jdolecek@netbsd.org>
List: current-users
Date: 09/25/2002 20:56:26
Dan Melomedman wrote:
> Kerberos would work just fine with an exec chain design. And I am still
> not sure why AFS wouldn't. You simply modify process state through
> environment, then executed job would do its thing.

Nobody is going to rewrite all programs needing authentication to do
exec chain. That's just not realistic. And I seriously doubt code
using exec chain would be sanely maintainable.

Jaromir 
-- 
Jaromir Dolecek <jdolecek@NetBSD.org>            http://www.NetBSD.org/
-=- We should be mindful of the potential goal, but as the tantric    -=-
-=- Buddhist masters say, ``You may notice during meditation that you -=-
-=- sometimes levitate or glow.   Do not let this distract you.''     -=-