[tac_plus] Dynamic authentication plugins via shared libraries?

[Steve Kemp]

On Thu Aug 16, 2012 at 10:02:49 -0700, heasley wrote:

> >  Assuming I cleaned up the code to rename the configuration
> > options, etc, would this be of interest in the main repository
> > and stand a chance of making it into the upstream releases of
> > the future?
> 
> sure, but why didn't you just write a PAM module for your sso and have
> tacacs enter from there?

  At the time that didn't occur to me/us..  I guess now you've said
 that I'm torn between wanting to submit the code-changes and thinking
 "I'll go away and hide now".

  I guess the utility of the work ultimately depends how likely
 it is that users of TACACS+ wish to tie it in to some external
 authentication system (which is neither PAM nor LDAP-based).

  If this is a common request, and common desire, then the code
 is useful.  If people approach it from the PAM-side then it is
 less useful.  I guess that is call I cannot make.


Steve
-- 
Debian GNU/Linux System Administration
http://www.debian-administration.org/