On Mon, Sep 22, 2014 at 03:54:09PM +0200, Jakub Hrozek wrote:
>
> Why eactly does the list of domains need to be protected by the list
> of uids?
Apparently the rest of the PAM data can be faked by the client.
How is that worse than the current situation when the client can pass
"user(a)DOMAIN.THEY.SHOULD.NOT.KNOW.ABOUT" to pam_start?
--
Jan Pazdziora
Principal Software Engineer, Identity Management Engineering, Red Hat