Re: PAM_IGNORE (was Re: Why should setcred be called after session open?)

[Nicolas Williams <Nicolas Williams ubsw com>]

On Wed, May 16, 2001 at 05:33:48PM -0400, Nicolas Williams wrote:
> I disagree. It's always appropriate to return PAM_IGNORE because it
> cannot contribute to success of the stack.

Let me correct this so it matches what I've been saying:

"It's never inappropriate for a module to return PAM_IGNORE if it cannot
perform the given function because doing so cannot contribute to success
of the PAM stack."

Cheers,

Nico
--