Re: ldap user authentication, PAM and chsh (change shell): how to make it work?

Jean-Francois Malouin wrote: > Hi, > > Please, bear with me! I know that this is not an openldap question per se, but > I've been banging my head on the wall for a long time on this issue and maybe > someone knows the quick answer: with user authentication coming from LDAP, what > is the magic that has to inserted with the PAM stuff on a client to allow users > to change their login shells using 'chsh'? I've been googling this for hours to > no avail. I nice hint would just suffice. The PAM API has no support for changing anything besides the password. The NSS API has no support for changing anything at all, it is purely read-only. Any solution for what you want to do is going to be non-standard, site- and implementation-specific.

-- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/