1 |
On 01/21/2010 06:09 PM, Neil Bothwick wrote: |
2 |
> On Thu, 21 Jan 2010 16:06:34 +0200, Nikos Chantziaras wrote: |
3 |
> |
4 |
>>> I'm no expert on PAM, but I've seen it used on every linux |
5 |
>>> distribution that I've tried over the years. In the case I just |
6 |
>>> described, I used it so I can identify myself with my ssh key, which |
7 |
>>> is much more secure than a password. So, in general, pam is used to |
8 |
>>> set security policy for how users can log in, change their passwords, |
9 |
>>> etc. I'm not sure how I would have added ssh key authentication |
10 |
>>> without pam. It's a good question. |
11 |
>> |
12 |
>> Well, all of this is still working here without PAM, including keys |
13 |
>> (I've set that option in the config file of the ssh deamon, not PAM.) |
14 |
> |
15 |
> I read this that walt is using SSH keys ( on a USB stick?) for local |
16 |
> login, which would be best done with PAM. SSH login with keys is handled |
17 |
> by SSH itself. |
18 |
|
19 |
Oh, don't know if it's possible on local login. Anyway, I was just |
20 |
curious. PAM and ConsoleKit were two things that got installed by |
21 |
default (desktop profile) and I couldn't even find a use for them, so I |
22 |
removed both and didn't see any difference, so I was just wondering what |
23 |
they were good for in the first place :P |