On Mon, 2009-10-12 at 14:49 +0200, Sumit Bose wrote:
> Do they skip checks or ignore if the provided password is valid
or
not ?
> Should we think of forking a child in proxy and running it as the
user
> that is attempting the password change? (Assuming we know it ?)
I think forking isn't needed here, because pam_sss should be kept
simple. Send everything you know to sssd and wait for a response.
I meant forking in the proxy module, not in pam_sss, you can't fork in
pam_sss.
Simo.
--
Simo Sorce * Red Hat, Inc * New York