[Pkg-xfce-devel] Bug#658284: Bug#658284: xfce4-session: Please review README.Debian

[Brian Potkin]

On Thu 02 Feb 2012 at 20:25:15 +0100, Yves-Alexis Perez wrote:

> On jeu., 2012-02-02 at 18:28 +0000, Brian Potkin wrote:
> > 
> > Is that a reference to using
> > 
> >    session optional     pam_loginuid.so
> > 
> > in /etc/pam.d/common-session? That also works me and has the
> > advantages
> > of being a single configuration change and having a Consolekit session
> > marked as 'active = TRUE' and 'is-local = TRUE'. I'd be supportive of
> > including a description of this method in README.Debian if it were to
> > help a significant number of startx users.
> > 
> > 
> I don't know what you did different, but just adding the snippet at the
> end of /etc/pam.d/common-session doesn't give me active=TRUE and
> is-local=TRUE here.

This is the relevant portion of my common-session:

   # here are the per-package modules (the "Primary" block)
   session [default=1]                     pam_permit.so
   # here's the fallback if no module succeeds
   session requisite                       pam_deny.so
   # prime the stack with a positive return value if there isn't one already;
   # this avoids us returning an error just because nothing sets a success code
   # since the modules above will each just jump around
   session required                        pam_permit.so
   # and here are more per-package modules (the "Additional" block)
   session required        pam_unix.so

   #brian added this next line for startx with xfce4
   session optional                        pam_loginuid.so 

   session optional                        pam_ck_connector.so nox11
   # end of pam-auth-update config

As you can see, it is before 'session optional pam_ck_connector.so nox11'.

I have no expertise in PAM so cannot explain why it has to be in this
position. I have seen the odd report or two that even doing this does
not give the desired outcome with startx. I've also come across people
recommending removing 'nox11' but I do not understand the significance
of that. Hopefully, repositioning the snippet will give you the same
outcome as I get.