Re: NSS and PAM, dynamic vs. static (was: 40% slowdown with dynamic /bin/sh)

On Wed, Nov 26, 2003 at 02:00:08AM +0100, Matthias Andree wrote:
> Matthew Dillon <dillon_at_apollo.backplane.com> writes:
> 
> >     How much do you intend to use NSS for?  I mean, what's the point of
> >     adopting this cool infrastructure if all you are going to do with it
> >     is make a better PAM out of it?
> 
> The important thing is that NSS allows to plug modules such as LDAP or
> PostgreSQL for user base management. PAM is only halfway there and
> doesn't give libc et al. a notion of a user or group context (in spite
> of its "account" context), NSS does. One might discuss if PAM is really
> needed with NSS in place, but it's hard to think of a system without
> NSS and removing PAM now doesn't look right.

NSS and PAM do not overlap.  They are complimentary and one cannot do
the job of the other.

Cheers,
-- 
Jacques Vidrine   NTT/Verio SME      FreeBSD UNIX       Heimdal
nectar_at_celabo.org jvidrine_at_verio.net nectar_at_freebsd.org nectar_at_kth.se