4 ms·
What is "built-in auth" for a console login or SSH? Before you come up with an answer involving /etc/shadow and crypt(), consider that not all systems use loca
by duskwuff 6y ago
What is "built-in auth" for a console login or SSH?
Before you come up with an answer involving /etc/shadow and crypt(), consider that not all systems use local password files... and that you've just reinvented what PAM does, except less flexible and more prone to implementation errors.
- e12e 6y agoSsh certainly have built in auth - i think usepam = no is still the default? Ssh certificates certainly "reinvent" auth - but not really in a bad way. Kerberos should also be quite possible without Pam. But either way, you need some trusted code with privileges to grant privileges (eg an suid binary).
- thwarted 6y agoAnd you need to reinvent what glibc does with nsswitch.