I put together a glue to the Pluggable Authentication Modules framework over the weekend. I've made it available to anyone who'd like to test it at the following address:
ftp://ftp.riverweb.com/pub/hww3/pike_modules/System_PAM-1.0.tar.gz
This requires a relatively recent version of Pike 7.5, ie .12 or .13 should be fine. The module is documented, though the autodoc extraction for C modules isn't currently working properly. Look at pam.cmod for the raw autodocs. If you're familiar with PAM, you shouldn't have any problems using this, and there are a few examples included.
I'd also be interested to hear of any design improvement type suggestions that might be floating out there, as this is my first "real" C module. I've built this module on Solaris and Linux, and have tested it under Solaris. I've tested it with dmalloc, so it shouldn't have any built in memory leaks during normal operation, but I've noticed the Solaris PAM implimentation seems to leak regardless depending on your authentication configuration (eg LDAP).
Bill
Bill Welliver hww3@riverweb.com writes:
I put together a glue to the Pluggable Authentication Modules framework over the weekend. I've made it available to anyone who'd like to test it at the following address:
Has anybody looked at the 'Pluggable Non Interactive Authentication Modules' at http://www.msu.ru/pniam/pniam.html? (web page seems not to respond now, but it's in google's cache). It's on my TODO-list, but I haven't gotten around to it, so it would be nice to hear if anybody else has looked at it.
(For reference, I'll state that I don't like PAM at all. It sounds like it might be a good idea, but the interface sucks, and the implementation seems to add enough complexity and bugs to a system to make it a bad idea to use. And even when it works asa advertised, it's mostly useless for any authentication mechanism fancier than a password written on the local console. This is however not the right place to debate these points, so I just refer to the old discussion around http://lists.debian.org/debian-devel/2000/debian-devel-200010/msg01417.html).
/Niels
pike-devel@lists.lysator.liu.se