Bug#47467: [Pkg-shadow-devel] Bug#47467: #47467 to be closed by PAMification of chfn and chsh?

[Alexander Gattin]

Hi!

On Fri, Oct 07, 2005 at 07:26:02AM +0200, Christian Perrier wrote:
> Quoting Alexander Gattin (xrgtn at yandex.ru):
...
> > I can confirm that PAM auth works fine now, but as for
> > changing anything on NIS server, it's IMHO impossible
> > with current libc (I may be wrong) -- for this there
> > are yppasswd, ypchsh and ypchfn tools...
> 
> Well, the bug log seems to say the contrary....as long as chsh and
> chfn are properly PAMified, they should be able to act on NIS.

No, this is wrong. Perhaps there are relevant changes
in libc which I'm unaware of, but chsh.c and chfn.c
do not contain any unusual libc code that looks able to
update fullname/shell (using NSS).

> This already seems to be possible for passwd.

Well, this should work with passwd, not through NSS
but through PAM. I think this works somewhere, but not
on my system -- I get PAM_AUTHINFO_UNAVAIL.

When I enable "nis" parameter to pam_unix, I get
prompted for NIS root password, but then anyway receive
PAM_AUTHINFO_UNAVAIL.

> I don't want to know about the details, I just want to know whether
> this should still be our problem about the proper PAMification of chsh
> and chfn.....

No, this is NSS/libc guys' problem in first place, then
ours (with Tomasz).

-- 
WBR,
xrgtn