Re: Password Module and PAM bug?

[Jamie C. <jca...@we...>]

ra...@si... wrote:

> 
>   First, I would like to mention that the Password Module for Usermin can
> include Solaris as a supported OS, I don't know if this was an oversight.
> On the otherhand, if there is a bug that I am unaware of which affects
> Solaris users, it would be nice to know.

I've just tried it on my own solaris system, and it seems to work well.

In the next usermin release, the module will use PAM for password changing

on Solaris.


>   The other item is in reguards to PAM and authentication of users in
> Usermin.  While recently searching a problem to which a user was
> connecting via Usermin, but failed an FTP session, I identified that the
> FTP session was failing because the password had expired.  There was no
> notification in Usermin, however.  I am not certain at this time if this
> is a bug/rfe for Usermin, or a bug/rfe in the PAM module, however, I
> wanted to make folks on this list aware of this issue.  When I can put in
> the cycles to hunt down what is needed, I will pass on the solution
> (unless someone else knows the answer already).


Normally PAM should check if an account has expired, and if so deny authentication.
Usermin never does any such checking itself ..

  - Jamie