At 3:48 PM +0000 2/16/03, Mark Murray wrote:
"Andrey A. Chernov" writes:
> On Sun, Feb 16, 2003, Dag-Erling Smorgrav wrote:
> > "Andrey A. Chernov" <[EMAIL PROTECTED]> writes:
> > Admins with no /etc/opieaccess AFFECTED!
>
> Admins with no /etc/opieaccess IDIOTS for not running mergemaster!
> Moreover, admins WITH old /etc/opieaccess (i.e. without your
> line) are affected too! Local logins becomes mysteriosly
> disabled for their users.
With a suitable "HEADS UP!" and appropriate changes to the
documentation, might is be possible to move _all_ policy control
into PAM, instead of having it split between OPIE and PAM?
If I understand this right, the issue is not some split between
OPIE and PAM. The issue is that OPIE wants a zero-length hostname
to indicate localhost. Andrey provided a patch which allows OPIE
to keep that standard (to OPIE) meaning. Could people try his
patch and then explain why it does not solve the problem they are
trying to solve?
If it means that PAM needs to be changed to use the same token
("") for localhost, that seems fine to me. Just as long as it's
documented.
--
Garance Alistair Drosehn = [EMAIL PROTECTED]
Senior Systems Programmer or [EMAIL PROTECTED]
Rensselaer Polytechnic Institute or [EMAIL PROTECTED]
To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-current" in the body of the message
