← Back to team overview

desktop-packages team mailing list archive

[Bug 393854] Re: Update PAM policy to allow password-less logins set up via users-admin

 

** Changed in: gdm (Debian)
       Status: Unknown => New

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to gdm in Ubuntu.
https://bugs.launchpad.net/bugs/393854

Title:
  Update PAM policy to allow password-less logins set up via users-admin

Status in GDM: The Gnome Display Manager:
  Fix Released
Status in “gdm” package in Ubuntu:
  Fix Released
Status in “gdm” package in Debian:
  New

Bug description:
  Binary package hint: gdm

  Upstream gnome-system-tools will have in 2.28 an option to allow specified users to log in graphically and locally without entering their password. This is intended for home users that can't use GDM's autologin because they are several on the same computer. A rationale is at:
  http://markmail.org/message/2h5isyf3kip6updb#query:gdm%20passwordless+page:1+mid:pa6lrzmwdtbol5it+state:results
  and the bug upstream was http://bugzilla.gnome.org/show_bug.cgi?id=414862

  For this to work in Ubuntu, we need to add a rule to the PAM configuration file:
  auth       sufficient  pam_succeed_if.so user ingroup nopasswdlogin

  And to create the group 'nopasswdlogin' in the postinstall script.

  Attached is a debdiff that does that. I guess somebody familiar with
  Ubuntu's PAM rules should check it since that's a critical part of the
  system's security, but that way of achieving this has been accepted by
  Brian Cameron (GDM) and Carlos Garnacho (gnome-system-tools) as safe,
  and many users has been using this as a hack for some time.

  This change should also affect gnome-screensaver so that the screen is
  not locked after suspend. I'll post a diff for that too, and for the
  gdm-new package.

  Please ask if you need more explanations about how this works.

To manage notifications about this bug go to:
https://bugs.launchpad.net/gdm/+bug/393854/+subscriptions