I'm trying to set up an automated install process for a PAM module that provides LDAP-like HTTP authentication. Since this is an alternative authentication module, I would need to add something like this:
auth sufficient mypam.so authserver=https://someserver.com
Since my application is a daemon that 'listens' to user authentication, it doesn't really deserve it's own config file, so it would have to leach onto something else (like GDM, SSH, etc).
I basically have two options here:
- Append or prepend to appropriate config files (and log all changes)
- Output the lines to add with suggestions for the sysadmin to manually edit
Which of these two options would a *nix admin prefer?
Are there any other approaches that I am missing that a *nix admin would prefer?
I am trying to market this to a sys-admin for widespread use in a corporate setting. This may also be marketed to end users, but in that case I would do the first option by default.