3 ms·
I wrote pam_ldap and did the initial port to Darwin. It is probably showing its age - you probably want better integration with GSS-API and also something like
by lukeh 5y ago
I wrote pam_ldap and did the initial port to Darwin. It is probably showing its age - you probably want better integration with GSS-API and also something like CredUI [1] for GUI support. But it's a great deal better than having to modify /bin/login each time you add an authentication mechanism! And although each implementation has its quirks, its age and thus relative simplicity means that it was quite widely implemented.
[1] https://github.com/PADL/CredUI https://github.com/PADL/CredUI
- rkeene2 5y agoIn this vein, I wrote a blog post on writing your first PAM module here [0]. [0] https://rkeene.org/projects/info/wiki/222 https://rkeene.org/projects/info/wiki/222
- stefan_ 5y ago> each time you add an authentication mechanism I don't do that. No one ever does that. Normal people don't keep a picturebook of authentication mechanisms that they need to cycle through. All the non-/etc/password PAM modules that some clueless IT ever forced on me (for as long as it took me to root and purge them from existence) to hook up with some network service just end up breaking your user account. The highlight is when they don't even authenticate with the network because they instead cache credentials.