Kerberos password change patch

[Frank Cusack]

On Tue, Apr 22, 2003 at 11:21:21AM -0400, James F.Hranicky wrote:
> Attached is a patch that allows for an interactive Kerberos password
> change via keyboard-interactive,

Why don't you let PAM do it?

> Does anyone know if it's architecturally possible to get this code to
> work under privsep, or rather, out from under privsep? Privsep is
> a bit difficult to debug, but I'll keep plugging away if need be.
> (Note, this patch is against 3.5p1, but the same problem happens when
> 3.6p1 is patched with it).

There's been a patch proposed to make PAM (and kbd-int) work correctly
under privsep.  IIRC, an import of FreeBSD code.

/fc