>>>>> "Martin" == Martin Schurz <[email protected]> writes:
>> It looks like Steve had an explicit reason for disabling
>> pam_tally here and I don't want to go second guess that. (Steve,
>> if I'm wrong, please chime in). In particular, Steve kept
>> pam_cracklib, which also requires an extra option, but did not
>> keep pam_tally.
Martin> Oh, sorry there was some detail missing. The config option
Martin> --enable-tally was added in linux-pam from version 1.4.0 to
Martin> soft deprecate this module. So when we re-enable it with
Martin> this option, it should build the pam_tally module like it
Martin> was the case up to 1.3.x.
I understood this. But Steve, the Debian maintainer did not choose to
use that option even though he did choose to use a similar option that
was available for cracklib.
My assumption is that we'll use whatever strategy we come up with for
tally for cracklib next relesae.