| Thread Previous • Date Previous • Date Next • Thread Next |
** Changed in: gdm (Debian)
Status: Unknown => New
--
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to gdm in Ubuntu.
https://bugs.launchpad.net/bugs/393854
Title:
Update PAM policy to allow password-less logins set up via users-admin
Status in GDM: The Gnome Display Manager:
Fix Released
Status in “gdm” package in Ubuntu:
Fix Released
Status in “gdm” package in Debian:
New
Bug description:
Binary package hint: gdm
Upstream gnome-system-tools will have in 2.28 an option to allow specified users to log in graphically and locally without entering their password. This is intended for home users that can't use GDM's autologin because they are several on the same computer. A rationale is at:
http://markmail.org/message/2h5isyf3kip6updb#query:gdm%20passwordless+page:1+mid:pa6lrzmwdtbol5it+state:results
and the bug upstream was http://bugzilla.gnome.org/show_bug.cgi?id=414862
For this to work in Ubuntu, we need to add a rule to the PAM configuration file:
auth sufficient pam_succeed_if.so user ingroup nopasswdlogin
And to create the group 'nopasswdlogin' in the postinstall script.
Attached is a debdiff that does that. I guess somebody familiar with
Ubuntu's PAM rules should check it since that's a critical part of the
system's security, but that way of achieving this has been accepted by
Brian Cameron (GDM) and Carlos Garnacho (gnome-system-tools) as safe,
and many users has been using this as a hack for some time.
This change should also affect gnome-screensaver so that the screen is
not locked after suspend. I'll post a diff for that too, and for the
gdm-new package.
Please ask if you need more explanations about how this works.
To manage notifications about this bug go to:
https://bugs.launchpad.net/gdm/+bug/393854/+subscriptions
| Thread Previous • Date Previous • Date Next • Thread Next |
