keyboard-interactive

Damien Miller
Tue, 08 Jan 2002 22:37:33 -0000

On Wed, 2002-01-09 at 02:33, Nicolas Williams wrote:

> Part of the problem is that a module might have more questions to ask
> given the answers to previous questions. Any system like PAM, with
> pluggable modules, will be potentially too dynamic to be used the way
> you want ("ask all your questions now, I'll answer them
later").

I can't see why this is the case. An API like:

while (!pam_conversation_done(pamh) {
        pam_get_prompts(&prompts);
        /* do something with them */
        pam_set_responses(&responses)
}

takes care of the potential flexability and doesn't dictate structure to
the application developer.

-d