On Mon, Dec 14, 2009 at 06:16:57PM -0300, patux
wrote:
After my last post, i was reading about
libperditiondb_mysql.
It would be great if we can map (on a mysql table) a diferent password
that the one used for "authenticate_in" feature.
+------------+--------------+------+-----+---------+-------+
| Field | Type | Null | Key | Default | Extra |
+------------+--------------+------+-----+---------+-------+
| user | varchar(128) | | PRI | | |
| pass | varchar(128) | | | | |
| servername | varchar(255) | | | | |
| port | varchar(8) | YES | | NULL | |
+------------+--------------+------+-----+---------+-------+
It will be useful to take this password for authentication with the
real server.
Extending perdition to do that should be fairly straightforward.
But if you were using this, how would you verify the end-user
is who they say they are? Would you use the PAM authentication
facility of perdition?