[Pkg-dspam-misc] Bug#356835: Preference: leave authentication module choice out of dspam-webfrontend

Jesus Climent jesus.climent at hispalinux.es
Tue Mar 14 20:36:05 UTC 2006


On Tue, Mar 14, 2006 at 02:39:57PM +0100, Martijn Pieters wrote:
> 
> My preference would be for dspam-webfrontend to not attempt to install
> any authentication modules at all; it merely should communicate the need
> for authentication and how such authentication maps to email accounts.
> 
> With the default Debian setup the mod_auth_shadow module requires that
> the Apache server gain read-access to the shadow file, which is not
> something I'd want to do on my system, as it undoes the security offered
> by the shadow file in the first place.

I agree with this view.

Other distros might want to automatize the process of setting a web page where
the user can login, but my idea is that Debian should not try to be too smart.

Allowing the admin to decide and set the end result should be the way to go,
with clear instructions...

-- 
Jesus Climent                                      info:www.pumuki.org
Unix SysAdm|Linux User #66350|Debian Developer|2.6.15|Helsinki Finland
GPG: 1024D/86946D69 BB64 2339 1CAA 7064 E429  7E18 66FC 1D7F 8694 6D69

Sandra Templeton, I love you and I WILL marry you.
		--Young Ed Bloom (Big Fish)



More information about the Pkg-dspam-misc mailing list