Felix Lechner via Guix-patches via <guix-patches@gnu.org> writes:

> Guile-PAM reimplements the PAM stack in GNU Guile and allows system
> administrators to write modules in GNU Guile.
>
> This patch series switches Guix System to Guile-PAM.  It relies on the shared
> objects from Linux-PAM until Guile implementations are available.
>
> In Guix, Guile-PAM could start Shepherd's user services or keep track of login
> sessions similar to pam_systemd.so.
>
> The guile-pam package ships with a detailed Texinfo manual.
>
> The software is in alpha stage.  For example, the interaction with sddm was
> not well-tested.  Please let me know how it goes---private email is okay!

I think this is a cool approach, but switching directly to guile-pam
might be too radical and probably shouldn't be enabled by default, but I
think simply merging the guile-pam package definitions should be fine.

What do you think?

>
> Kind regards
> Felix
>
>
> Felix Lechner (3):
>   Add guile-pam.
>   Switch to Guile-PAM.
>   Add a guile-pam-module service.
>
>  doc/guix.texi                   |  89 ++++++++++
>  gnu/local.mk                    |   1 +
>  gnu/packages/linux.scm          |  56 ++++++
>  gnu/services/authentication.scm |   9 +-
>  gnu/services/base.scm           |  16 +-
>  gnu/services/desktop.scm        |  14 +-
>  gnu/services/kerberos.scm       |  12 +-
>  gnu/services/lightdm.scm        |  69 ++++++--
>  gnu/services/pam-mount.scm      |   5 +-
>  gnu/services/pam.scm            | 105 +++++++++++
>  gnu/services/sddm.scm           |  91 +++++++---
>  gnu/services/xorg.scm           |  17 +-
>  gnu/system/pam.scm              | 296 ++++++++++++++++++++++++++------
>  13 files changed, 671 insertions(+), 109 deletions(-)
>  create mode 100644 gnu/services/pam.scm
>
>
> base-commit: 862a9b5b25966845f71d218ad8c0c5655ffc479a