>>>>> "Henry" == Henry B Hotz <hotz at jpl.nasa.gov> writes:
Henry> I agree that doing the check in PAM on the client side is
Henry> interesting, but it fulfills a different goal.
Nico proposes that kadmind call out to PAM on the server side.