[OpenAFS-port-darwin] aklog/afslog at console login and Mac OS 10.2

[David Botsch]

Looking back at the pam port that was being done by padl, it looks like 
they were actually working on a bridge to allow loginwindow to use pam. 
Even more interesting is that macosxlabs.org actually states that you 
can use pam to extend the loginwindow (so, maybe they made the same 
wrong assumptions?).

does anyone have a contact at Apple to either request an afs 
authenticator for loginwindow or a pam authenticator for the 
loginwindow? As MacOSXlabs states, pam would allow loginwindow to be 
extremely extendable.

On 2002.10.04 15:22 Joseph Jackson wrote:
> --On 9/30/02 1:58 PM -0700 Alexei Kosut <akosut@stanford.edu> wrote:
> 
>> I think that loginwindow authentication is pluggable only with
>> Security Agent plugins.  I suppose you could write such a plugin that
>> did PAM, but the API here looks even harder to reverse-engineer than
>> most private Apple APIs (it appears to be C++).
> 
> That was also my understanding after attending Apple's developer 
> conference in May. Loginwindow doesn't have any direct connection to 
> PAM. All the BSD type stuff does go through PAM (sshd, ftpd, etc.) 
> but Loginwindow has separate keys in /etc/authorization.
> 
> Joe Jackson,
> Carnegie Mellon University.
> 
> _______________________________________________
> port-darwin mailing list
> port-darwin@openafs.org
> https://lists.openafs.org/mailman/listinfo/port-darwin

-- 
********************************
David William Botsch
Consultant/Advisor II
CCMR Computing Facility
dwb7@ccmr.cornell.edu
********************************