[PAM-NTDOM] using pam_ntdom for ftp authentication

[Mayers, Philip J]

The PAM module could reopen (dup()) the file handles 0/1/2 to /dev/null.

Or am I missing the point?

Cheers,
Phil

-----Original Message-----
From: Peter Samuelson [mailto:peter at cadcamlab.org]
Sent: Wednesday, June 14, 2000 10:15 PM
To: Multiple recipients of list SAMBA-TECHNICAL
Subject: Re: [PAM-NTDOM] using pam_ntdom for ftp authentication



[Michael Tokarev <mjt at tls.msk.ru>]
> Hey, but what's the purpose of pam_converse functions!?  Pam modules
> should _never_ use stdin/stdout/etc, but deal with conversion
> functions only.

True.  The difficulty is that pam_ntdom uses library files from Samba.
Those libraries were not specifically designed for use with PAM.

The "stdout/stderr is ok to use" assumption is still a bad one, for any
library.  It's just that, as someone already said, it didn't cause a
problem back when *only* Samba was using it.

Peter