Re: [hylafax-users] FaxAdmin and hfaxd.conf

[Aidan Van Dyk <aidan@xxxxxxxx>]

* Lee Howard <faxguy@xxxxxxxxxxxxxxxx> [081026 22:04]:
> Joe Kissner wrote:
> >I am wondering how do i just block hfaxd from using PAM. do i have to 
> >recompile with out PAM or is there an easier way of blocking a service 
> >from using PAM?
> 
> As far as I'm aware it is a compiled-in feature.  There is no runtime 
> configuration option to disable it.
> 
> ./configure --with-DISABLE_PAM=yes

It's *not* going to fix his problem.  As I said before, "faxadmin" is
the *group* that hfaxd does a getgrnam() call on for checking if the
group has a list of users that should be given admin access.  It (hfaxd)
does not do *anything* related to PAM or LDAP(via pam) with that.
That's completely his "operating system" (i.e. glibc/NSS) doing that.

He can either:
1) Disable AdminGroup by forcing it to nothing in hfaxd.conf:
	AdminGroup:   ""

2) Fix his NSS to not do ldap queries on groups if he doesn't want LDAP
   queries on groups.

a.


-- 
Aidan Van Dyk                                             aidan@xxxxxxxx
Senior Software Developer                          +1 215 825-8700 x8103
iFAX Solutions, Inc.                                http://www.ifax.com/

Attachment: signature.asc
Description: Digital signature