Re: pam and parallelism

--===============2668501911619993451==
Content-Language: en-US
Content-Type: multipart/signed; micalg=sha-1;
	protocol="application/x-pkcs7-signature";
	boundary="=-fsCWrk2WflqFGqQozimj"

--=-fsCWrk2WflqFGqQozimj
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

> On Wed, 2017-11-22 at 09:11 +0000, thilo cestonaro ts fujitsu com
> wrote:
> > Hi all!
> >=20
> > Is there a mechanism/api which I can use to have two authentication
> > modes in
> > parallel.=20
> >=20
> > E.g. the user can either login via password or via usb token.
> > One way would be to look for the usb token for 10 sec. and then start
> > over to
> > password authentication. But IMHO would it be a better way if the
> > wait for the
> > usb token is running in the background and if the token is plugged
> > in, the user
> > is logged in automatically regardless if he is typing in a password
> > or not.
> > However the user is able to type in the password anyway to login via
> > password,
> > altought the usb token pam module is looking for the token.
> >=20
> > Hope I could explain what I want to do :).
> >=20
> > Is there already such API and what would be the key functions for
> > this way?
> >=20
> > Thanks for any advice!
>=20
> You should be able to run two different PAM authentication stacks in
> two threads in parallel. Of course once one of the stacks succeeds,
> only one session call should be done and the other unfinished
> authentication stack should be aborted. You have to provide the
> synchronization mechanisms on your own though. The example of
> application that does this is GDM.

With PAM authentication stacks you mean, /etc/pam.d/*.conf, each conf is on=
e
stack right? That means, to get the parallelism, one would need to implemen=
t
an authenication app, right?

Pity!

Thanks for the answer!

Cheers,
Thilo
--=-fsCWrk2WflqFGqQozimj
Content-Type: application/x-pkcs7-signature; name="smime.p7s"
Content-Disposition: attachment; filename="smime.p7s"
Content-Transfer-Encoding: base64
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--=-fsCWrk2WflqFGqQozimj--


--===============2668501911619993451==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Pam-list mailing list
[email protected]
https://www.redhat.com/mailman/listinfo/pam-list
--===============2668501911619993451==--