SMArT 0.99 Perl     http://www.lintux.cx/smart.html     Released Mar 10 2001


This is the first official release of the Perl version of SMArT. It's a lot
faster than the old program, but very possibly not yet complete. Please tell
me what features are still missing or not working correctly so I can correct
it.

The program is (hopefully) also quite a lot more secure, although passwords
are still transferred over the network in almost-cleartext. The only way to
solve this is using https, but I don't know how it works (yet) so this is
all I can do... Instead of the old password system, you just have to fill in
your root login name + password to use SMArT. The program setuid()s to a
less privileged user as soon as possible, although this is not that
necessary, maybe. The less privileged user is specified in the smart.conf
file, in case you want to change it.


To get the program working, just add the following line to your
/etc/services file: (You can set the 902 to whatever port you want to run
SMArT on.)

smart	902/tcp

And the following line should be added to /etc/inetd.conf:

smart	stream	tcp	nowait	root	/usr/local/smart/smart

(SMArT can be installed anywhere you want, just make sure the path in the
inetd.conf file is correct...)

You might also have to recompile the check_login binary. The following
command should do the job:

gcc check_login.c -o check_login -lpam -ldl

(The binary which comes with this tarball should work on Debian Potato
systems without recompiling.)

You probably also need to create a PAM configuration file for smart
authentication. Well, let's see how it works, I'm not sure since it's not
the same on every distro. :(

This is my /etc/pam.d/smart file:

auth            required        pam_unix.so
account         required        pam_unix.so
password        required        pam_unix.so
session         required        pam_unix.so

This should work on a Debian Potato system, but a RedHat system /might/ want
pam_pwdb instead, IIRC.


That should be enough to get it working. If you see problems, you can mail
me at lintux@lintux.cx or if you prefer you can use ICQ. (#72696705) (Dutch
people can speak their native language to me, FYI. ;)

Have fun!

Wilmer van der Gaast.