[horde] PAM authentication missing PAM?

[Michael M Slusarz]

Quoting Ole Wolf <ole at naturloven.dk>:

> On Mon, 2011-06-13 at 12:30 -0600, Michael M Slusarz wrote:
>
>> Quoting Jan Schneider <jan at horde.org>:
>>
>> > Zitat von Ole Wolf <ole at naturloven.dk>:
>> >
>> >> On Mon, 2011-06-13 at 12:06 -0600, Michael M Slusarz wrote:
>> >>
>> >>> Actually... I think I was right the *first* time.  The PECL PAM's
>> >>> package.xml indicates that the package is correctly named 'pam', not
>> >>> 'pam_auth'.  So I think the error here is that the OP is using
>> >>> pam_auth from Debian, which is no longer supported.
>> >
>> > Correct.
>> >
>> >> Yes, I'm using Debian (specifically, Ubuntu).
>> >>
>> >> I'm always reluctant to remove a package from a distribution and install
>> >> some other equivalent. Is there anything that prevents you from
>> >> supporting both a package named 'pam' and a package named 'pam_auth'?
>> >
>> > Yes, the fact that pam_auth is unmaintained and has been deprecated
>> > years ago.
>>
>> I've added a check to test.php that will report an error if pam isn't
>> available but pam_auth is detected on the system.
>
>
> It turns out there are quite a few dependencies on my Debian (Ubuntu)
> system that will break if I remove pam_auth.
>
> Perhaps the best solution for now might be a middle path: Issue a
> warning that the installation may be unsecure or even break if pam_auth
> is detected, but let Horde accept pam_auth nonetheless. (Or maybe that's
> what you meant?)

No.  We have no guarantees of the pam_auth API, so we can't use it.

michael

___________________________________
Michael Slusarz [slusarz at horde.org]