Andreas Schneider » PAM http://blog.cynapses.org a cosmological pedestrian Tue, 23 Feb 2010 10:17:36 +0000 en hourly 1 http://wordpress.org/?v=3.0 Automatic testing of PAM modules http://blog.cynapses.org/2009/04/29/automatic-testing-of-pam-modules/ http://blog.cynapses.org/2009/04/29/automatic-testing-of-pam-modules/#comments Wed, 29 Apr 2009 16:40:29 +0000 GlaDiaC http://blog.cynapses.org/?p=64 Last week at the SambaXP conference I had a discussion with Günther Deschner about the testing of PAM modules. What we want to do is automatic testing. To achieve this in the Samba build farm you need a separate "pam.d" config directory for testing. You should be able to change the config and mess it up without getting locked out.

I've introduced a new function to PAM called pam_start_test() which takes and additional argument where you can specify the config directory. After this I've changed the call in pamtester and added a commandline option for the config directory. To do automatic testing I've added another commandline option to specify the password to use for authentication.

gladiac@maximegalon:~> pamtester -v -C/tmp/pam.d -Psecret login csync authenticate
pamtester: invoking pam_start(login, csync, ...)
pamtester: performing operation - authenticate
pamtester: successfully authenticated

You can find the patches here.

]]> http://blog.cynapses.org/2009/04/29/automatic-testing-of-pam-modules/feed/ 0 csync and pam_csync 0.42.0 beta1 http://blog.cynapses.org/2008/09/17/csync-and-pam_csync-0420-beta1/ http://blog.cynapses.org/2008/09/17/csync-and-pam_csync-0420-beta1/#comments Wed, 17 Sep 2008 13:23:34 +0000 GlaDiaC http://blog.cynapses.org/?p=40 I've released a new version of csync and pam_csync. csync is a bidirectional file synchronizer for Linux and allows to keep two copies of files and directories in sync. It uses uses widly adopted protocols like smb or sftp so that there is no need for a server component of csync. It is a user-level program which means there is no need to be a superuser. With pam_csync it is possible to create roaming home directories.

This version fixes several bugs to increase the stability of the file synchronizer. It provides a new plugin to synchronize two replicas with the sftp protocol. To get the csync sftp plugin working you need libssh 0.2 with the following two patches:

Map permission fields
Errno mapping

The libssh package in the network:synchronization:files project in the build service has these two patches. The csync version of the BS project provides a csync-plugin-sftp package.

Packages for Fedora 9, openSUSE and SUSE Linux Enterprise 10 can be downloaded here.

More information at http://www.csync.org/.

]]> http://blog.cynapses.org/2008/09/17/csync-and-pam_csync-0420-beta1/feed/ 3