Where 3rd-party PAM modules should be placed?

[Mark Felder]

On Thu, Jul 9, 2015, at 13:05, Lev Serebryakov wrote:
>
>  `security/pam_ssh_agent_auth' installs PAM module
> (pam_ssh_agent_auth.so) into `${LOCALBASE}/lib', but
> `security/pam_yubico' and `security/oath-toolkit' install PAM modules
> into `${LOCALBASE}/lib/security'.
> 
>  And, by default on 10-STABLE, modules from
> `${LOCALBASE}/lib/security' can not be loaded by name (without full
> path) in PAM configuration file.
> 
>  Which place is correct? I like `${LOCALBASE}/lib/security', but using
> full pathnames looks ugly!
> 

pam_google-authenticator also is installed into ${LOCALBASE}/lib

For the record, I've always used full path names in my /etc/pam.d files
to enable additional modules. Being able to use the short names would be
nice.