Bug 20606 – new ebuild: pam_dotfile

• Product: Gentoo Linux
• Status: RESOLVED FIXED

[Description Christian Loitsch 2003-05-07 16:56:08 UTC]

DESCRIPTION="pam_dotfile is a module for pam to allow password-storing in \$HOME
/dotfiles"
HOMEPAGE="http://www.stud.uni-hamburg.de/users/lennart/projects/pam_dotfile/"

<snip>
#%PAM-1.0
auth sufficient pam_unix_auth.so
auth sufficient pam_dotfile.so use_first_pass no_warn
auth required pam_deny.so
</snip>

As user waldo:

<snip>
[waldo@wonderi] ~$ pam-dotfile-gen -a imap
Password:quux
Please repeat; password:quux
Password added.
</snip>

That's it. User waldo may now access his IMAP mail store either by
using his unix password or by using quux.

Reproducible: Always
Steps to Reproduce:




did not test pam_dotfile
might have security-holes

[Comment 1 Christian Loitsch 2003-05-07 16:56:37 UTC]

Created attachment 11661 [details]
ebuild for pam_dotfile

[Comment 2 Christian Loitsch 2003-05-07 18:53:35 UTC]

I just found a small bug (not a security-bug), so wait for an updated version.


(the problem lies in:
pipe(p)
<snip>
close(0)
close(1)
close(2)

dup2(p[0],0)

if filedescriptor 0 or 1 or 2 was not opened when calling pipe p[0] is 0/1/2 which will be closed before doing dup2)

====
when 

[Comment 3 Christian Loitsch 2003-06-06 17:58:09 UTC]

Created attachment 12895 [details]
updated dotfile

I finally found the time to update to the new version.

Personally I even think many programs like exim and postgresql should depend on
this package if compiled with pam-support, as they are not capable of using the
existing pam installation.

IMO this module is the best way to use pam for other things than logins!

[Comment 4 Donny Davies (RETIRED) 2003-07-19 15:14:40 UTC]

wow there are other modules that do this already.

pam_userdb comes to mind, which sounds a lot better than this.

[Comment 5 Christian Loitsch 2003-07-29 04:08:01 UTC]

Contrary to pam_userdb pam_dotfile does not use a central database.
All passwords are stored in the users-home directory!

In the example given, the file ~waldo/.pam-imap would be created and contains the encrypted 
password.

For me this has some interesting properties:
If I delete a User, i don"t have to remember to change de db used by userdb.
If I want some passwords to be the same, I can hardlink those files to be one file.
In addition the module does not depend on anything.

I hope I will find the time to update the ebuild to version 0.6 next week.

[Comment 6 Christian Loitsch 2003-08-19 07:28:43 UTC]

Created attachment 16323 [details]
0.6 version of pam_dotfile

[Comment 7 Christian Loitsch 2003-08-28 09:02:01 UTC]

Created attachment 16722 [details]
version 0.7 of pam_dotfile

Is there a reason (except for Donny Davies prefering another tool) for not
including this into portage?

[Comment 8 Donny Davies (RETIRED) 2003-09-22 18:34:55 UTC]

No Christian Loitsch, only a time matter, where there are hundreds of user-submitted ebuilds and not enough developers to handle them all in a quick manner.

But thank you for your submission Christian Loitsch.

[Comment 9 Donny Davies (RETIRED) 2003-09-23 07:26:03 UTC]

Which category did you want this to appear in?

[Comment 10 Christian Loitsch 2003-09-24 08:02:50 UTC]

I would put it into syslibs.

[Comment 11 Donny Davies (RETIRED) 2003-09-24 16:07:36 UTC]

I think it fits better in app-admin if you dont mind, not in the same category with glibc.  Also, pam-dotfile-helper is landing in /usr/sbin, are you sure that's where you want it?

Anyways, I've added it.  Let me know if it's all ok and we'll remove the ~arch masking.

Ciao.