"Patterson, Ross" wrote: > > new_authtok_reqd=ok default=ignore]". I'd *love* to see the SysAdmin manual > > (http://www.kernel.org/pub/linux/libs/pam/Linux-PAM-html/pam-4.html) include > > the complex forms for all four simple forms so I won't have to go code-diving next > > time. Please file a bug report: http://sourceforge.net/tracker/?group_id=6663&atid=106663 > > Second problem - coding exactly that results in different behavior from "optional". > > Specifically, when my test-module returns PAM_SERVICE_ERR, later modules > > in the stack aren't executed with the complex form, but are with the simple form. Mmm. This may well be a bug. Could you offer an explicit example configuration that fails for you and I'll see if I can get to the bottom of this? > > What gives? Anybody understand this stuff? Well, I thought I did. Cheers Andrew
