slackware 15 and pam

kikinovak · 07-31-2014, 04:38 AM

Quote:

Originally Posted by willysr

I have tried to install an ubuntu server just for fun on vm and tried the minimal settings for webserver and as you said, it was minimal at first, but after few weeks, i ran apt-get update and upgrade, there comes the nightmare where new version if the same apps required a mass of new deps...
I don't know if the same happened on debian, but that's what i got on Ubuntu, which is/was based on Debian.

Hey Willy, here's one of the lesser-known distinctions of the Debian/Ubuntu world. Upgrade system and eventually install new dependencies:

Code:

# apt-get dist-upgrade

Update system without installing new dependencies:

Code:

# apt-get upgrade

That being said, Ubuntu Server LTS has a feature freeze like the other distros. I'm running a handful of Ubuntu servers both locally and public, and I haven't noticed any mysterious dependency tsunami. On the contrary, the installations are quite lightweight.

Cheers,

Niki

brianL · 07-31-2014, 05:52 AM

Brian Q Public here. As I've explained in my LQ blog, I was a late starter as far as interest in and use of computers is concerned. I'm interested in just about anything that can be done with Linux, and a full install of Slackware (+ a few more bits and pieces) gives me the software to do it. OOTB, without apt-getting or yuming for hours on end. So, to me, it's not bloated. If some Slackers need PAM, let 'em have it. I don't know how, or where, I'll leave that to Pat & the Team.

ReaperX7 · 07-31-2014, 05:26 PM

Quote:

Originally Posted by kikinovak

I am surprised indeed. First hint in 2.900+ messages that you actually do something with your system.

Yeah, and there's no need for you to be rude either. I do plenty with my system, including a lot of R&D for a project I work at with diligence. Sorry, if I'm just one more "stupid American" you act like you can look down on.

Yeah, bro, I see how it is... just because I'm not a system or network admin, you look down on me? Go read every post I've ever made! Quote something from each and every single one where I didn't do least something. Put your money where your mouth is or pipe down and be silent!

kikinovak · 08-01-2014, 02:15 AM

Quote:

Originally Posted by zerouno

I'm not a pam lover, but I think tha the next stable release (14.2 or 15.0) should be linked to pam.

Slackware already contains pam, in /extra, but is only for additional packages. I can't use ssh with pam.
Really, I don't like pam, but some authentication schema (ldap for example) does not work without it

It would be nice to have a little update and/or statement from the BDFL himself about the subject.

Didier Spaier · 08-01-2014, 02:45 AM

Quote:

Originally Posted by kikinovak

It would be nice to have a little update and/or statement from the BDFL himself about the subject.

My prediction: this will happen in a timely manner.

The other way round, it wouldn't be bad to increase a bit the signal/noise ratio of this thread.

brianL · 08-01-2014, 02:59 AM

Talking about minimalism & bloat, here's something for the minimalophiles:

http://minimal.linux-bg.org/

Only 8 MiB!!! Oh, WOW!!!

P.S.

Quote:

Originally Posted by Didier Spaier

it wouldn't be bad to increase a bit the signal/noise ratio of this thread.

There you are, a bit of noise.

bartgymnast · 08-01-2014, 07:32 AM

As most of you know me by a dropline gnome dev. and from the systemd slackbuilds.
I am using PAM for a long time.

My opinions on this matter.

1. Does Slackware need PAM
A. NO
2. Would PAM be nice to have, and what would be minimal to be rebuild ?
A. Yes, shadow only.

Personally it would be handy to have PAM, but it is not to much hassle to build and install PAM, and rebuild shadow in order to have PAM functionality for the software you need.

The only reason why I would like to see PAM in Slackware is to make my life easier.

kikinovak · 08-01-2014, 07:45 AM

Quote:

Originally Posted by bartgymnast

2. Would PAM be nice to have, and what would be minimal to be rebuild ?
A. Yes, shadow only.

Are you sure about that? Vincent Batts has an experimental PAMified package repo, and on the latest count, it contains no less than 22 (twenty-two) rebuilt packages.

http://www.hashbangbash.com/downloads/pam/pkgs/i486/

bartgymnast · 08-01-2014, 07:48 AM

let me give a few examples:

proftp <-- doesnt need to be rebuild, only if you want to use pam for it (works without)
openssh <--- see proftpd

etc. etc.

kikinovak · 08-01-2014, 08:40 AM

Quote:

Originally Posted by bartgymnast

let me give a few examples:

proftp <-- doesnt need to be rebuild, only if you want to use pam for it (works without)
openssh <--- see proftpd

etc. etc.

Well, what can a poor boy say? Thank you very much for that clarification! That's great news!

NeoMetal · 08-01-2014, 08:49 AM

Yeah it really depends what you want to accomplish. I would say rebuild su, sudo, and ssh as well as shadow though so that all the normal login methods work as expected.

Arkerless · 08-01-2014, 08:51 AM

Quote:

Originally Posted by kikinovak

Well, what can a poor boy say? Thank you very much for that clarification! That's great news!

I think this points out one of the subtle problems that tends to make problems for threads of this nature.

You ask the same question and two people can still understand it in different ways.

PAM? Heck no! says person 1 who interprets the question as 'rebuild everything to rely on PAM and look just like CoreBuntu.
PAM? Why not? says person 2 who interprets the question as 'build one package that provides PAM exclusively other packages which require it.'

They could both actually be in total agreement if you gave them more specific, detailed proposals rather than the more general question, we just dont know.

At any rate despite some painful-to-read moments of heat I think some interesting arguments have been posted and I feel like I am learning something.

@bartgymnast - can you expand a little particularly in regards to how you use PAM, if you do in fact use it?

kikinovak · 08-01-2014, 09:15 AM

Quote:

Originally Posted by Arkerless

They could both actually be in total agreement if you gave them more specific, detailed proposals rather than the more general question, we just dont know.

My specific need being LDAP authentication working on a Slackware server with mixed clients (Slackware, Ubuntu, Elementary OS).

bartgymnast · 08-01-2014, 09:25 AM

Quote:

Originally Posted by Arkerless

@bartgymnast - can you expand a little particularly in regards to how you use PAM, if you do in fact use it?

I am using PAM for GDM and now for the logind of systemd.

before using systemd, it was just for GDM.

Richard Cranium · 08-01-2014, 09:30 AM

Quote:

Originally Posted by kikinovak

My specific need being LDAP authentication working on a Slackware server with mixed clients (Slackware, Ubuntu, Elementary OS).

My problem is getting openldap up and running with the correct security constraints (SASL and TLS). I haven't gotten to the libnss_ldap portion yet.

This part of configuring openldap correctly has nothing to do with PAM.

If you want SASL to use ldap for authentication information, you'll have to rebuild cyrus-sasl as well as modify /etc/rc.d/rc.saslauthd to use the ldap authentication mechanism.