Holger Jakobs <holger(at)jakobs(dot)com> writes:
> What about leaving it to the administrator of a system to provide a
> function (either a C function in a shared lib or an executable) which
> gets information passed and decides whether the access will be granted?
I think this is exactly what PAM is for. Write your own authentication
module, plug it in.
regards, tom lane