[OpenAFS-devel] OPenAFS and OpenSSH-3.8
Jim Rees
rees@umich.edu
Mon, 01 Mar 2004 22:16:07 -0500
Exactly.. Running a pam session module (that is itself a shared
library) can perform the setpag for you. This seems to solve your
problem without adding a direct dlopen() to ssh.
I thought the problem we were trying to solve was that the pam module gets
called in a subprocess, so it can't do the setpag. Did I misunderstand?
Also, even if pam can do the setpag, we're still stuck with pam-less
implementations. What do we do about them?