← Back to team overview

touch-packages team mailing list archive

[Bug 1348251] Re: please make use of pam_tally2 for Touch login and screenunlock

 

Huh, I thought we had a different bug about this, but I can't find it
now.

I just wanted to note here that we found that pam_tally2 didn't have
enough reporting to be useful to us.  It couldn't tell the greeter (A)
how many attempts were left to go or (B) when it was causing a punitive
delay (vs a PAM delay for some other reason -- though the greeter could
probably guess after a few seconds).

So we went with a tally kept in AccountsService.  If we later figure out
how to take more advantage of pam_tally2, we can always change backends.
Losing existing tallies isn't a big deal.

** Changed in: ubuntu-touch-session (Ubuntu)
       Status: New => Invalid

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to lightdm in Ubuntu.
https://bugs.launchpad.net/bugs/1348251

Title:
  please make use of pam_tally2 for Touch login and screenunlock

Status in Light Display Manager:
  Fix Released
Status in “lightdm” package in Ubuntu:
  Fix Released
Status in “ubuntu-touch-session” package in Ubuntu:
  Invalid

Bug description:
  Ubuntu Touch will soon have/now has the ability to set a PIN/password
  for the user. If the password is set, we should provide some
  protection against brute force password guessing since many users will
  choose to use PINs rather than proper passwords. This is required for
  devices for RTM, but not for the traditional Ubuntu desktop.

To manage notifications about this bug go to:
https://bugs.launchpad.net/lightdm/+bug/1348251/+subscriptions


References