[Bug 431320] Review Request: pam_usb - Hardware authentication using ordinary USB Flash Drives

bugzilla at redhat.com bugzilla at redhat.com
Mon Feb 4 14:34:09 UTC 2008


Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug report.

Summary: Review Request: pam_usb - Hardware authentication using ordinary USB Flash Drives


https://bugzilla.redhat.com/show_bug.cgi?id=431320





------- Additional Comments From guidolinfrancesco at email.it  2008-02-04 09:34 EST -------
I've investigated deeply and I've found an interesting thing: pam_usb-0.3.3 and
pam_usb-0.4.2 store their settings in different places, so upgrading from 0.3.3
to 0.4.2 will not remove the old settings.

I've installed and configured pam_usb-0.3.3 in Fedora7 and then I upgraded it to
pam_usb-0.4.2; then I downgraded to pam_usb-0.3.3 again and the old settings was
still there and it works normally like before.

So I think we could insert the new pam_usb-0.4.2 in RawHide and then in Fedora9,
and inform the users that after the upgrade their old settings will be ignored
but won't be erased.
So the users can choose between upgrade to the new pam_usb-0.4.2 and create the
new settings from scratch or not to upgrade and still use pam_usb-0.3.3.
If they install pam_usb-0.4.2 by mistake they can downgrade to pam_usb-0.3.3 and
it will works again.

In my opinion that upgrade to pam_usb-0.4.2 in Fedora9 is the right thing,
because it's more secure and reliable, a lot of bugs was fixed, new
functionality was added, and it's more easy to configure with the new tool
pamusb-conf.
pam_usb-0.3.3 instead is more difficult to configure and is less reliable
because it's sufficient to copy the private key in the usb device to grant the
access to the account of the user.

-- 
Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.




More information about the Fedora-package-review mailing list