On Wed, May 16, 2001 at 05:33:48PM -0400, Nicolas Williams wrote: > I disagree. It's always appropriate to return PAM_IGNORE because it > cannot contribute to success of the stack. Let me correct this so it matches what I've been saying: "It's never inappropriate for a module to return PAM_IGNORE if it cannot perform the given function because doing so cannot contribute to success of the PAM stack." Cheers, Nico --