[PAM-NTDOM] using pam_ntdom for ftp authentication
Mayers, Philip J
p.mayers at ic.ac.uk
Thu Jun 15 08:32:41 GMT 2000
The PAM module could reopen (dup()) the file handles 0/1/2 to /dev/null.
Or am I missing the point?
From: Peter Samuelson [mailto:peter at cadcamlab.org]
Sent: Wednesday, June 14, 2000 10:15 PM
To: Multiple recipients of list SAMBA-TECHNICAL
Subject: Re: [PAM-NTDOM] using pam_ntdom for ftp authentication
[Michael Tokarev <mjt at tls.msk.ru>]
> Hey, but what's the purpose of pam_converse functions!? Pam modules
> should _never_ use stdin/stdout/etc, but deal with conversion
> functions only.
True. The difficulty is that pam_ntdom uses library files from Samba.
Those libraries were not specifically designed for use with PAM.
The "stdout/stderr is ok to use" assumption is still a bad one, for any
library. It's just that, as someone already said, it didn't cause a
problem back when *only* Samba was using it.
More information about the samba-technical