Arturo 'Buanzo' Busleiman schreef:
> Alexander Skwar wrote:
>
>>> /etc/passwd like on HP-UX 11.00. Ie. no /etc/shadow.
>
>
> /etc/shadow was provided by an additional package and libraries. Just
> like PAM. Shadow changed from being a security measure to be an auth
> storage backend. As a storage backend, it needs libraries to access
> it. That's where PAM enters.
>
No, that's where PAM *can* enter, but it *need* not--
eix shadow
* sys-apps/shadow
Available versions: 4.0.4.1-r4 4.0.5-r2 4.0.5-r3 ~4.0.6-r1 ~4.0.7
~4.0.7-r1 4.0.7-r3 4.0.7-r4 ~4.0.11.1-r1 ~4.0.11.1-r2 ~4.0.12 ~4.0.13
Installed: 4.0.7-r4
Homepage: http://shadow.pld.org.pl/
Description: Utilities to deal with user accounts
eix pam
* app-vim/pam-syntax
Available versions: 20030818
Installed: none
Homepage:
http://www.vim.org/scripts/script.php?script_id=735
Description: vim plugin: PAM configuration syntax highlighting
* dev-perl/Authen-PAM
Available versions: 0.14 ~0.16
Installed: none
Homepage: http://www.cs.kuleuven.ac.be/~pelov/pam/
Description: Interface to PAM library
* kde-base/kdebase-pam
Available versions: 4 5 6
Installed: none
Homepage: http://www.kde.org
Description: pam.d files used by several KDE components.
* net-mail/checkpassword-pam
Available versions: 0.97 0.99
Installed: none
Homepage: http://checkpasswd-pam.sourceforge.net/
Description: checkpassword-compatible authentication
program w/pam support
* net-www/mod_auth_pam
Available versions: 1.1.1 ~1.1.1-r1
Installed: none
Homepage: http://pam.sourceforge.net/mod_auth_pam/
Description: PAM authentication module for Apache2
* sys-apps/pam-login
Available versions: 3.14 3.17 ~4.0.11.1-r2 ~4.0.12
Installed: none
Homepage: http://www.thkukuk.de/pam/pam_login/
Description: Based on the sources from util-linux, with
added pam and shadow features
* sys-auth/pam_ldap
Available versions: 156 ~161 ~164 ~167 171 176 176-r1 ~178 178-r1 180
Installed: none
Homepage: http://www.padl.com/OSS/pam_ldap.html
Description: PAM LDAP Module
* sys-auth/pam_ssh_agent
Available versions: ~0.1 0.2 ~0.2-r1
Installed: none
Homepage: http://pam-ssh-agent.sourceforge.net/
Description: PAM module that spawns a ssh-agent and adds
identities using the password supplied at login
* sys-auth/pam_usb
Available versions: 0.3.1 0.3.2
Installed: none
Homepage: http://www.pamusb.org/
Description: A PAM module that enables authentication using
an USB-Storage device (such as an USB Pen) through DSA private/public keys.
* sys-auth/pam_smb
Available versions: 1.9.9-r1 2.0.0_rc5 ~2.0.0_rc6
Installed: none
Homepage: http://www.csn.ul.ie/~airlied/pam_smb/
Description: The PAM SMB module, which allows
authentication against an NT server.
* sys-auth/pam_ssh
Available versions: 1.9 1.91 ~1.91-r1
Installed: none
Homepage: http://pam-ssh.sourceforge.net/
Description: Uses ssh-agent to provide single sign-on
* sys-auth/pam_dotfile
Available versions: 0.7 ~0.7-r1
Installed: none
Homepage:
http://www.stud.uni-hamburg.de/users/lennart/projects/pam_dotfile/
Description: pam module to allow password-storing in
$HOME/dotfiles
* sys-auth/pam_passwdqc
Available versions: 0.7.5 ~1.0.2
Installed: none
Homepage: http://www.openwall.com/passwdqc/
Description: Password strength checking for PAM aware
password changing programs
* sys-auth/pam_mysql
Available versions: ~0.4.7 0.5 ~0.6.0
Installed: none
Homepage: http://pam-mysql.sourceforge.net/
Description: pam_mysql is a module for pam to authenticate
users with mysql
* sys-auth/pam_krb5
Available versions: 1.0 1.0-r1 ~20030601 ~20030601-r1
Installed: none
Homepage: http://www.fcusack.com/
Description: Pam module for MIT Kerberos V
* sys-auth/pam_pwdfile
Available versions: ~0.99
Installed: none
Homepage: http://cpbotha.net/pam_pwdfile.html
Description: PAM module for authenticating against
passwd-like files.
* sys-auth/pam_require
Available versions: ~0.6
Installed: none
Homepage:
http://www.splitbrain.org/Programming/C/pam_require/
Description: Allows you to require a special group or user
to access a service.
* sys-libs/pam
Available versions: 0.77-r6 ~0.77-r8 0.78-r2 0.78-r3
Installed: none
Homepage: http://www.kernel.org/pub/linux/libs/pam/
Description: Based on the multilib eclass
equery hasuse pam
[ Searching for USE flag pam in all categories among: ]
* installed packages
[I--] [ ] app-admin/sudo-1.6.8_p9-r2 (0)
[I--] [ ] app-misc/mc-4.6.0-r14 (0)
[I--] [ ] app-misc/screen-4.0.2-r4 (0)
[I--] [ ] dev-libs/cyrus-sasl-2.1.20 (2)
[I--] [ ] dev-util/cvs-1.12.12-r2 (0)
[I--] [ ] gnome-base/gdm-2.8.0.5 (0)
[I--] [ ] net-fs/samba-3.0.20b (0)
[I--] [ ] net-mail/mailbase-1 (0)
[I--] [ ] net-misc/openssh-4.2_p1 (0)
[I--] [ ] net-print/cups-1.1.23-r1 (0)
[I--] [ ] net-proxy/dante-1.1.18 (0)
[I--] [ ] sys-apps/shadow-4.0.7-r4 (0)
[I--] [ ] sys-apps/util-linux-2.12r (0)
[I--] [ ] sys-process/fcron-3.0.0 (0)
[I--] [ ] x11-base/xorg-x11-6.8.99.15-r4 (0)
emerge -pv app-admin/sudo mc cyrus-sasl gdm samba mailbase cups dante
shadow util-linux fcron xorg-x11
These are the packages that I would merge, in order:
Calculating dependencies ...done!
[ebuild R ] app-admin/sudo-1.6.8_p9-r2 +ldap +offensive -pam
(-selinux) -skey 0 kB
[ebuild R ] app-misc/mc-4.6.0-r14 +7zip -X +gpm +ncurses +nls -pam
-samba +slang +unicode 0 kB
[ebuild R ] dev-libs/cyrus-sasl-2.1.20 -authdaemond -berkdb +gdbm
+java -kerberos +ldap -mysql -pam -postgres +ssl -static 1,733 kB
[ebuild R ] gnome-base/gdm-2.8.0.5 -debug -ipv6 -pam (-selinux)
+tcpd -xinerama 0 kB
[ebuild R ] net-fs/samba-3.0.20b -acl +async +automount +cups -doc
-examples -kerberos +ldap -ldapsam +libclamav -mysql +oav -pam -postgres
+python -quotas +readline (-selinux) -swat -syslog -winbind +xml +xml2 16 kB
[ebuild R ] net-mail/mailbase-1 -pam 0 kB
[ebuild R ] net-print/cups-1.1.23-r1 +nls -pam +samba -slp +ssl
8,501 kB
[ebuild R ] net-proxy/dante-1.1.18 -debug -pam (-selinux) +tcpd 0 kB
[ebuild R ] sys-apps/shadow-4.0.7-r4 +nls -nousuid -pam (-selinux)
-skey 0 kB
[ebuild R ] sys-apps/util-linux-2.12r +crypt +nls -old-crypt -pam
+perl (-selinux) -static 0 kB
[ebuild R ] sys-process/fcron-3.0.0 -debug +doc -pam (-selinux) 0 kB
[ebuild R ] x11-base/xorg-x11-6.8.99.15-r4 -3dfx +bitmap-fonts -cjk
-debug -doc +font-server +insecure-drivers -ipv6 -minimal +nls -nocxx
+opengl -pam -sdk -static +truetype-fonts +type1-fonts (-uclibc) +xprint
+xv 0 kB
Total size of downloads: 10,251 kB
As you see, all the relevant programs that *can* use PAM (which is
*optional*) do *not* do so on my system. I do not need PAM
authentication, and I do not use PAM authentication. As far as I know,
my system runs fine (or at least has no PAM-related issues).
What more is there to say?
Holly
--
gentoo-user@gentoo.org mailing list
