Re: [Pam-mysql-general] pam_mysql and nss_mysql

[James O'K. <jo...@mi...>]

On Mon, 2 Jun 2003, Florian Verdet wrote:

>  |It's on my todo list to make pam_mysql use the same config file and 
>  |options to streamline this. 
> 
> I'll do it!
> (Of course, only if it's fine 4 U)

That's fine with me. I have little time to work on pam_mysql, and I 
personally don't use it anymore.
 
> >From your TODO list (in the forum), it seems you want to merge the code
> itself - not only the config files!
> What do you see more usefull, easier to do,... ?

A little bit of both. It seems like the two work as a pair and while one 
doesn't require the other, they do compliment each other. And some code 
like connecting to the database itself could be shared. 
Someone expressed concern with having sensitive data in /etc/pam.d/ files, 
so having that in a seperate config file seems reasonable. nss-mysql 
already does this, so why not share the resources.


>  |Getting the homedirectory and shell, etc
>  |from pam_mysql is the most requested 'feature' I see requested.
> 
> Yeah - but as discussed on the pam-list not feasable by PAM itself...

Right, but if pam_mysql and nss_mysql were moving in the same direction at 
the same pace, etc. They could work together to do what people want. I'm 
fairly sure they dont' care if pam or nss does the work, they just want it 
to happen.
 
 
> Didn't see it yet...

http://sourceforge.net/tracker/index.php?func=detail&aid=747609&group_id=5741&atid=355741

> I had the same idea/discussion with my supervisor.
> His answer was: The MySQL server is (usually) in the same local
> (protected) network - thus SSL between db-srv & pam_mysql is not as
> important as that.

Usually, yes. But in matters of security, it pays to be overly paranoid.

> Is it ok for you (and all on this list) if I merge my coding into the SF
> tree only when I've finished the work I'm supposed to do?

Late code is better than no code.

> @James:
> Could you please add me as pam_mysql developer @ SF ?
> My login is 'fvgoto'

I hope you don't mind if I waited a bit before doing this?

-james