After much hair pulling dusty and I are getting very close to integrating pam into the macos securityd framework, Pamela . It’s indescribable how frustrating it is, in one late night session we described it as “building a ladder on top of another ladder in the dark.” We have macos authenticating against pam but cant remove the builtin:authenticate function which is pretty necessary. Not much documentation is available it looks like it is possible as the builtin:krbauthenticate seems to side step it. Probably a few more hours of testing and will have it solved.
Jan 312011