[PATCH] Specify PAM Service name in sshd_config

[Ben Lindstrom]

On May 15, 2013, at 2:03 PM, Jan Pechanec <jan.pechanec at oracle.com> wrote:

> On Wed, 15 May 2013, Schmidt, Kenneth P wrote:
[..]
>> Why not just use the PAMServiceName and use a Flag to indicate that the
>> authentication method should be appended to the PAM service?  So something
>> like 
>> 
>> PAMServiceName	admincli
>> PAMAppendAuthMethod	yes
>> 
>> would be admincli-kbdint.  That way both the pam service and the auth
>> method could be specified without worrying about the options being
>> mutually exclusive and preventing a possible invalid configuration to be
>> specified.
> 
> 	I personally think it's more complicated since you'd always need 
> both options' values to figure out what will be the PAM service name, 
> either explicitly stated in the config file or their implicit default 
> value(s). J.


Personally think Mr Morgan's solution is more elegant as there is a single
configuration and no conflicting options.

- Ben