Re: Auth using PAM

[Maarten de Boer]

Cary Coulter wrote:
> Is there a patch for 1.11.6 CVS for using PAM on Linux for user
> authentication?   We're using WSAD/Eclipse and understand the 1.11.6
> is as new as we can go for now.

I really think you don't want to do this. It is a lot better (a lot more
secure) to use CVS through ssh. I am not familiar however with WSAD/Eclipse,
but I suppose you can configure it to use a external remote shell connection
(:ext:) instead of pserver.

> Our main development platform is Windows. I have a Linux machine using
> pam_smb_auth to authenticate logins via our NT domain for the "Windows
> only" users.  Regular Unix users use the shadow file.  All user/group
> info is in /etc/passwd and /etc/shadow, only the passwords come from
> NT.

Our CVS server is Linux, the password are on a SAMBA server, the clients
use CVS through ssh (mostly using the excellent CVS gui client LinCVS,
also for Windows), the CVS server authenticates the ssh login using the
pam_smb_auth module. (And the shells on the CVS server are very limited
chrooted shells that only allow to execute cvs)

Maarten