Re: [gentoo-user] regarding PAM [WAS: root password gremlin]

[Jerry McBride <mcbrides9@comcast.net>]

On Sunday 20 November 2005 15:24, Hemmann, Volker Armin wrote:
> On Sunday 20 November 2005 14:49, Arturo 'Buanzo' Busleiman wrote:
> > Alexander Skwar wrote:
> > > Optional things aren't standard. They are
> > > optional. PAM is optional. You don't need
> > > it - at least not for basic setups.
> >
> > It is NOW optional. I'm sure this will change, that's why I recommend to
> > try it now that there is time to still enhance it LOTS.
>
> well,
> pam is buggy (ever logged out because of a X crash and not able to play any
> sounds anymore? That was pam)
> pam has a long history of security problems
> pam is not easy to configure and error prone.
> every added layer adds to the risks.
>
> All that I read said, that pam was a temporary solution some years ago -
> and that the chances are big that it will fade into obscurity in the next
> ones.
>
> For single-user setups it is as needed as a wart.
>

Bingo... I manage a herd of laptops... well... I'm done from 100 to 22... but 
PAM isn't on a single one of them and life hasn't been happier.

:')



> I am angry with myself, that I installed it, without thinking.
> Learning? Where? And why? Most setups don't need it. And the ones that need
> some more complex authentification, can get it in other ways.

-- 

******************************************************************************
                     Registered Linux User Number 185956
              FSF Associate Member number 2340 since 05/20/2004
             Join me in chat at #linux-users on irc.freenode.net
    Buy an Xbox for $149.00, run linux on it and Microsoft loses $150.00!
    12:51pm  up 63 days,  4:16,  3 users,  load average: 3.12, 3.06, 3.01
-- 
gentoo-user@gentoo.org mailing list