[sudo-workers] NOPASSWD sudo and PAM

Todd C. Miller Todd.Miller at sudo.ws
Mon Jan 15 06:56:32 MST 2018


On Mon, 15 Jan 2018 13:59:13 +0100, =?UTF-8?Q?Daniel_Kope=c4=8dek?= wrote:

> What about the pam_acct_mgmt API function?
> According to the manual, this function is supposed to check the account 
> validity.
> Would it make sense to call this function without calling 
> pam_authenticate in case of NOPASSWD (or !authenticate)?

Yes, I think that would work.  We can certainly give it a try.

 - todd


More information about the sudo-workers mailing list