9. Notes

Contents of this section

I intend to put development comments here... like ``at the moment this isn't actually supported''. At release time what ever is in this section will be placed in the Bugs section below! :)

• Perhaps we should keep a registry of data-names as used by pam_[gs]et_data() so there are no unintentional problems due to conflicts?
• pam_strerror() should be internationalized....
• pam_sm_setcred should a pam-module be responsible for checking if a user has already been authenticated before allowing a change of his/her credentials? Or this a job for the application?
• Should there be some check in pam_chauthtok, that the user has already been validated or not? Probably not, since the application should take care of enforcing this, by paying attention to preceeding returns from pam_....().
• There has been some debate about whether initgroups() should be in an application or in a module. It was settled by Sun who stated that initgroups is an action of the application. The modules are permitted to add additional groups, however.
• Refinements/futher suggestions to syslog(3) usage by modules are needed.

Next Chapter, Previous Chapter

Table of contents of this chapter, General table of contents

Top of the document, Beginning of this Chapter