3 ms·
What makes you think they'd do a good job?
by d33 10y ago
What makes you think they'd do a good job?
- Spivak 10y agoPAM behind the scenes seems fine, it's the interface that's clunky and prone to error. Imagine a world where a PAM would come with a file /etc/systemd/system/sssd.pam which specified all of its dependencies, what services it should be installed in, and uses Before= and After= to determine its position. Enabling SSS auth would be as simple as systemctl enable sssd.pam. And since sssd.pam would depend on sssd.service if sssd.service fails for some reason the pam module could be disabled to keep the junk out of your logs.