Authenticating users from proprietary user databases

Darren Tucker dtucker at zip.com.au
Tue Oct 6 09:33:05 EST 2009


Yaniv Aknin wrote:
> Hrmf, how simple, I didn't think about patching getpwnam() et al 
> themselves, I was somehow locked on patching the nsswitch circuitry.
> But in this case, why not use LD_PRELOAD and avoid the need to build my 
> own OpenSSH and have two different OpenSSH builds?

Yeah that should work too.

Personally I prefer that daemons don't change their behaviour if you 
happen to restart them without some environment variable, but it sounds 
like it would be fine for your appliance environment.

-- 
Darren Tucker (dtucker at zip.com.au)
GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4  37C9 C982 80C7 8FF4 FA69
     Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.


More information about the openssh-unix-dev mailing list