Re: [RFC][PATCH] Detect and handle PAM changing user name

On Fri, May 25, 2007 at 08:24:13AM +1000, Darren Tucker wrote:

> James R. Leu wrote:
> > I've implemented a patch to openssh which allows the PAM auth layer
> > to detect if the PAM stack has changed the user name and then adjusts
> > its internal data structures accordingly. (imagine a PAM stack that
> > uses individual credentials to authenticate, but assigns the user to
> > a role account).
> >
> > First, is the openssh community interested in this patch?
>
> Maybe. I'm not convinced it's the right thing to do, though.

I know of several implementations of some variety of template/role
user support for openssh, so I suspect there would be a reasonable
amount of interest in seeing this as an officially supported
feature. Perhaps with an option to allow/disallow it.

-Ed
_______________________________________________
openssh-unix-dev mailing list
openssh-unix-dev@mindrot.org
http://lists.mindrot.org/mailman/lis...enssh-unix-dev