[Pkg-xfce-devel] Bug#717297: Bug#717297: Bug#717297: lightdm: pam.d/lightdm-greeter doesn't use system settings for pam

[Yves-Alexis Perez]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On Sat, Jul 20, 2013 at 09:43:07AM +0200, Yves-Alexis Perez wrote:
> On sam., 2013-07-20 at 11:29 +1000, Peter Chubb wrote:
> > >>>>> "Yves-Alexis" == Yves-Alexis Perez <corsac at debian.org> writes:
> > 
> > 
> > Yves-Alexis> Can you tell us what exactly is broken by this? As far as
> > Yves-Alexis> I know this pam file is only for the greeter, not for
> > Yves-Alexis> session run from them (they're handled by
> > Yves-Alexis> /etc/pam.d/lightdm which correctly includes the common
> > Yves-Alexis> debian files.
> > 
> > People who authenticate only via ldap --- for whom pam_unix.so doesn't
> > work --- cannot log in, because username and password are not know to
> > pam_unix.so only to either pam_ldap.so or pam_sssd.so.  I imagine
> > other authentication mechanisms will also fail.
> > 
> > What's more if there's any other policy set in common-account or
> > common-session, it's not obeyed (e.g., time-of-use or group membership
> > restrictions)
> 
> I'm pretty puzzled by this. Can you exactly describe what happens,
> starting from when the greeter starts, and provide some logs?
> 
> As I already wrote, my feeling was that /etc/pam.d/lightdm-greeter was
> *not* used for user authentication, so it should even matter in your
> case.
> 
Any news on this?
- -- 
Yves-Alexis Perez
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)

iQEcBAEBCgAGBQJSz6ioAAoJEG3bU/KmdcClWakIAJqwiICqQ/xxeClRo6W/CsSg
6q9iAip4GTvC9hN+tU4WUKXZ9wGkV2Oo7G2MgJHdxBgys3U/VJr9zyY+u1tWGN+I
t7zriGr4xnXoD+TNgfD/Ct5o0kywZh7llYAg1R/b565/CoU2yy6dwuPIqaRM15tU
kZ0nqFpoyiNnSF3tisa9wtWEbh0b6rcEL6eOmQ0cS9X3ePwDwu2D24bi1CF0fOQY
Vs7ftZkNHOsvklWX6YPAC/8BbITsvm5iB7NkgO+/ugZfd0oPaeAfRkjV+CksmCpS
bLW2+oKJ8iH7FG7QERW100gXSm1HFOD4Z+BFUbvSMMlXycnfxVC6yKcxLcsaIPs=
=w7Bj
-----END PGP SIGNATURE-----