4 ms·
PAM lets you do some pretty slick things. I did a bunch of Samba/Active Directory integrations on Solaris[0] back in the late aughts. I never got super deep int
by mauvehaus 4y ago
PAM lets you do some pretty slick things. I did a bunch of Samba/Active Directory integrations on Solaris[0] back in the late aughts. I never got super deep into the PAM side of things, but it was pretty clear that you could go absolutely wild with it.
[0] For people rolling their own NAS, mostly with SAMFS, at least one with ZFS.
- arminiusreturns 4y agoYep, it's powerful, complicated, and easy to jack things up, but very useful. It's been a while but I had a whole company on three factor ssh via the google auth libpam module at one point and it worked quite well once I ironed out the bugs.
- brmgb 4y agoHaving had to use it to connect authentication to LDAP via sssd, I’m not sure I would describe it as nicely as you do. To put it bluntly, my personal opinion is that it is a massive piece of shit. It makes even simple things feel complicated for no reason whatsoever and is so brittle. The whole thing is a huge design failure.