[horde] PAM authentication missing PAM?
Michael M Slusarz
slusarz at horde.org
Mon Jun 13 19:01:33 UTC 2011
Quoting Ole Wolf <ole at naturloven.dk>:
> On Mon, 2011-06-13 at 12:30 -0600, Michael M Slusarz wrote:
>> Quoting Jan Schneider <jan at horde.org>:
>> > Zitat von Ole Wolf <ole at naturloven.dk>:
>> >> On Mon, 2011-06-13 at 12:06 -0600, Michael M Slusarz wrote:
>> >>> Actually... I think I was right the *first* time. The PECL PAM's
>> >>> package.xml indicates that the package is correctly named 'pam', not
>> >>> 'pam_auth'. So I think the error here is that the OP is using
>> >>> pam_auth from Debian, which is no longer supported.
>> > Correct.
>> >> Yes, I'm using Debian (specifically, Ubuntu).
>> >> I'm always reluctant to remove a package from a distribution and install
>> >> some other equivalent. Is there anything that prevents you from
>> >> supporting both a package named 'pam' and a package named 'pam_auth'?
>> > Yes, the fact that pam_auth is unmaintained and has been deprecated
>> > years ago.
>> I've added a check to test.php that will report an error if pam isn't
>> available but pam_auth is detected on the system.
> It turns out there are quite a few dependencies on my Debian (Ubuntu)
> system that will break if I remove pam_auth.
> Perhaps the best solution for now might be a middle path: Issue a
> warning that the installation may be unsecure or even break if pam_auth
> is detected, but let Horde accept pam_auth nonetheless. (Or maybe that's
> what you meant?)
No. We have no guarantees of the pam_auth API, so we can't use it.
Michael Slusarz [slusarz at horde.org]
More information about the horde