[pkg-fso-maint] nodm (was Re: Upload to main?)

[Luca Capello]

Hi Joachim!

On Sat, 04 Oct 2008 00:38:30 +0200, Joachim Breitner wrote:
> Am Freitag, den 03.10.2008, 18:09 +0200 schrieb Luca Capello:
>> On Fri, 03 Oct 2008 17:08:24 +0200, Joachim Breitner wrote:
>> > Am Freitag, den 03.10.2008, 13:04 +0200 schrieb Luca Capello:
>> >> Would you like to manage that or do you prefer Python coding?  :-D
>> >
>> > I think I’ll do it soon. I’d like to write a small C helper for proper
>> > PAM interaction, though, otherwise it would be almost trivial, based on
>> > zhone-session.
>> 
>> I haven't checked yet, but are we sure that `su -l` doesn't already do
>> anything we need?  The advantage of shell scripts is that they don't
>> need to be compiled at all and they are easily customizable.
>
> Using “su -l” means that the PAM session configuration for su and for
> nodm would have to be equal, which is not always desirable (consider
> auto-mounting something), and which I’d really like to avoid for
> something that’s less a hack than zhone-session.

Now I understood what you meant and I fully agree.  However, this could
be a goal for revision 0.2 ;-)

> I’m pondering about providing a general pam-helper binary that could be
> used by others as well (e.g. FreeNX is abusing ssh or su for a similar
> reason), but there are some security problems with a general binary
> (i.e. one that let’s you specify the session type).

Can't the session be passed as an option or in a configuration file?

Thx, bye,
Gismo / Luca
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 314 bytes
Desc: not available
Url : http://lists.alioth.debian.org/pipermail/pkg-fso-maint/attachments/20081005/3100eee4/attachment.pgp