-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 `security/pam_ssh_agent_auth' installs PAM module (pam_ssh_agent_auth.so) into `${LOCALBASE}/lib', but `security/pam_yubico' and `security/oath-toolkit' install PAM modules into `${LOCALBASE}/lib/security'. And, by default on 10-STABLE, modules from `${LOCALBASE}/lib/security' can not be loaded by name (without full path) in PAM configuration file. Which place is correct? I like `${LOCALBASE}/lib/security', but using full pathnames looks ugly! - -- // Lev Serebryakov -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQJ8BAEBCgBmBQJVnrfmXxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXRGOTZEMUNBMEI1RjQzMThCNjc0QjMzMEFF QUIwM0M1OEJGREM0NzhGAAoJEOqwPFi/3EeP8cgQAI+5Bj9EteOICQKePSSQ3Ox4 vYMQuX8IRmZvDDjfVzeuu9ExzO0qSMQtbARRVbd54HchwzcSVI807zatzwavvoPS 9LcJZNSA2/k19H6bd8nROB9SDdZsQg/pDCRCm9ePInIBxp9fhLXABUV2TSM0ZZHV ed+BkbyAIA7pfpVOgMN6HVzQ5Snp/LtqWP7AAGlopOQ+jce52hABQ6pufeiucBjS kGsuJy4pVn8Uc2XHtx5i0m0+F/j4lZYgkNgJjHfZhuh2JkTsEd0rPFgpvteCS/++ /rrRyOwVFeW8BrllKI5bVvimVD+HTBNFbo4oQY2kLvJxamL1NFOksbmXQqWOCEE6 968hV2hetvkOkaCbZLlnMD3QKUyQhqJtjcKN/1HforDmOvFyjk7vknt9755gBlm1 w6lwPbJR45YNDKbDN/Y+5xL7KGHYmNZefgjLy2wyZhBcdz4I8xqsdxOHb5LAmXrQ oX+i6jg+gxZLcHOfeacezEOlN6ZeQw2ElHRxViEEabYX0NtabRXu7VjxME83Vjmq HtWCPV0PAglGrnYdlz72YreR0l5WxN4WjrkR2TOzoQeJ7aK1LUH3VbL+Dsb3BA2t Yd06cyA192s54VlJ2ntppzZ8EnOz+wYHpVRSL9nNZfQh2SCv8A/ic57aV9QoOYqy qjNhE9GTDAENP/XRvbzE =NI2q -----END PGP SIGNATURE-----
On Thu, Jul 9, 2015, at 13:05, Lev Serebryakov wrote:> > `security/pam_ssh_agent_auth' installs PAM module > (pam_ssh_agent_auth.so) into `${LOCALBASE}/lib', but > `security/pam_yubico' and `security/oath-toolkit' install PAM modules > into `${LOCALBASE}/lib/security'. > > And, by default on 10-STABLE, modules from > `${LOCALBASE}/lib/security' can not be loaded by name (without full > path) in PAM configuration file. > > Which place is correct? I like `${LOCALBASE}/lib/security', but using > full pathnames looks ugly! >pam_google-authenticator also is installed into ${LOCALBASE}/lib For the record, I've always used full path names in my /etc/pam.d files to enable additional modules. Being able to use the short names would be nice.