[PATCH] a library and, uh, a PAM module

[Patrice Dumas]

On Wed, Feb 28, 2007 at 01:00:24PM -0500, David Zeuthen wrote:
> 
> Plus, you really want your login manager to have native ConsolKit
> support (rather than a PAM module) so you can feed in more hints.. this

These hints would certainly be usefull in other session handling pam
modules, so it seems to me that it definitively makes sense to think 
about pam being more generic using real world consolekit needs.

> PAM module is more of a stop-gap solution because the RH util-linux
> maintainer wanted it that way for /bin/login. Sure, this PAM module
> might be useful too for wdm, kdm  but I think the position of the
> ConsoleKit team (or me at least; can't speak for Jon) is that you want
> to call into ConsoleKit from your app... heck, you already have to patch
> e.g. wdm to set/unset these environment variables.

I am more in line with the util-linux maintainer (guess you know that
already ;-) because it seems to me that pam modules offer a modularity
and an ease of configuration by sysadmins that patches for apps will
never be able to give. Having the display and the device cleanly
available in pam session modules seems to me to obe something desirable,
and not too much demanding for pam-enabled application; with its double
meaning PAM_TTY seems indeed to be problematic.

--
Pat