[OpenAFS-devel] OPenAFS and OpenSSH-3.8

Jim Rees rees@umich.edu
Mon, 01 Mar 2004 22:16:07 -0500


  Exactly..  Running a pam session module (that is itself a shared
  library) can perform the setpag for you.  This seems to solve your
  problem without adding a direct dlopen() to ssh.

I thought the problem we were trying to solve was that the pam module gets
called in a subprocess, so it can't do the setpag.  Did I misunderstand?

Also, even if pam can do the setpag, we're still stuck with pam-less
implementations.  What do we do about them?