Using the pam conversation function with CDE

[Kristin_1]

I am running an HP-UX 11.00 machine and using the PAM for authentication. I've developed this PAM module using C. Under certain circumstances during the logon process I require to ablity to diplay a list of options to the user and get his/her response. If the user is using telnet everything works fine. The user is able to make his/her selection and based on that response the PAM modules performs specific tasks. However, with the CDE, there are no options displayed to the user, therefore the user sees the system hanging on the logon. If I record debug messages into a file, the process is waiting for a respsonse from the user.
Does anyone know if the CDE has a known problem with the PAM conversation function? Is there a patch for this issue? Any suggestions would be appreciated.

[Rick Beldin · Accepted solution]

While the pam spec supports the idea of conversattions, dtlogin was not designed with this in mind and has no real provisions for doing this type of converstation. To do so would be a major engineering rehaul of the dtlogin code and there are no plans to do so at this time.

For the immediate problem, I would suggest reconsidering your design. I don't see any workaround that could be easily implemented.

An enhancement request (JAGad95477) was filed some time ago and never acted upon because of the scope of the problem and the lack of a good business case to do so.

If this is indeed necessary as part of your business, I would suggest logging a formal Response Center call and working with the engineer to develop a business case that can be presented to the lab. There are no guarantees that this be implemented, but it at least will get the lab to consider it.

Not a pretty answer, but I hope it helps in your decision process.