Re: NSS and PAM, dynamic vs. static (was: 40% slowdown with dynamic /bin/sh)

From: Jacques A. Vidrine <nectar_at_FreeBSD.org>
Date: Wed, 26 Nov 2003 07:04:02 -0600
On Wed, Nov 26, 2003 at 02:00:08AM +0100, Matthias Andree wrote:
> Matthew Dillon <dillon_at_apollo.backplane.com> writes:
> 
> >     How much do you intend to use NSS for?  I mean, what's the point of
> >     adopting this cool infrastructure if all you are going to do with it
> >     is make a better PAM out of it?
> 
> The important thing is that NSS allows to plug modules such as LDAP or
> PostgreSQL for user base management. PAM is only halfway there and
> doesn't give libc et al. a notion of a user or group context (in spite
> of its "account" context), NSS does. One might discuss if PAM is really
> needed with NSS in place, but it's hard to think of a system without
> NSS and removing PAM now doesn't look right.

NSS and PAM do not overlap.  They are complimentary and one cannot do
the job of the other.

Cheers,
-- 
Jacques Vidrine   NTT/Verio SME      FreeBSD UNIX       Heimdal
nectar_at_celabo.org jvidrine_at_verio.net nectar_at_freebsd.org nectar_at_kth.se
Received on Wed Nov 26 2003 - 04:04:07 UTC

This archive was generated by hypermail 2.4.0 : Wed May 19 2021 - 11:37:31 UTC