Hello all,
All the talk about the sasldb migration reminds me
of Nalin Dahyabhai's pam sasldb patch
(http://people.redhat.com/nalin/test/pam_sasldb-20011022.tgz).
Has anyone tried that yet? My thought is this.
Perhaps people who need to migrate could use that
(probably with a little work) by using PAM under
SASL. I am thinking of a pam configuration like:
auth
sufficient
/lib/security/sasl1db.so
auth required /lib/security/sasl2db.so
There would need to be a second pam module to
authenticate against the new db (A patch on the
current one could probably work). I'm thinking
this would probably allow people to use both DB's
concurrently.
Additionally, how hard is it to write a pwcheck
method in SASL 2? I had a couple I did in SASL
1.5, but they required patches to the source. Can
you just drop in a plugin, do you have to write a
pwcheck/saslauthd daemon, or is there a simpler
method I'm just overlooking?
