Re: PAM Authentication?

[Todd Denniston]

Jeff Smith wrote:
> 
> --- Todd Denniston <address@hidden>
> wrote:
> 
> > Jeff Smith wrote:
> > >
> > > I am trying to bring cvs into my company.  I am
> > > working with one of our Solaris admins on getting
> > the
> > > product installed and configured.
> > >
> > > We have run into a problem with getting the PAM
> > > authentication working.
<SNIP>
> > Which instructions?
<SNIP>
> The information here:
> https://www.cvshome.org/docs/manual/cvs-1.12.11/cvs_2.html
> talks about pam authentication.
> 
> I've done some more reading and I didn't realize PAM
> support was that newly introduced into CVS.
> 
> >
> > Is y24jds a username at the OS level, i.e., not just
> > for CVS?
> > if it is then pserver should just use the system's
> > login, or something close
> > to it, which would automatically use PAM.
> 
> Yes, y24jds is a valid unix username that can log into
> the system fine.  So you are saying that pserver just
> knows how to authenticate valid unix users on the
> system and we shouldn't of had to configure anything
> else?
> 

I don't usualy think of PAM for anything other than the system user logins,
so this is new to me.
Is it allowing you to use a login athority other than the one used to login
at the console, i.e., /etc/password|NIS|LDAP?

The point I was attempting to get at is, if you are using username+password
combos that you use to login to the system (console), then why fret with
extra configuration, just let CVS fall back to using system authintication.

<SNIP> 
> I might just have to fall back to the hand-maintained
> password file for our users.  I only have about 35-50
> that would be in it.
If you are already using the system logins, then you can let the system
maintain the logins. 

-- 
Todd Denniston
Crane Division, Naval Surface Warfare Center (NSWC Crane) 
Harnessing the Power of Technology for the Warfighter