-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 On Sat, Jul 20, 2013 at 09:43:07AM +0200, Yves-Alexis Perez wrote: > On sam., 2013-07-20 at 11:29 +1000, Peter Chubb wrote: > > >>>>> "Yves-Alexis" == Yves-Alexis Perez <cor...@debian.org> writes: > > > > > > Yves-Alexis> Can you tell us what exactly is broken by this? As far as > > Yves-Alexis> I know this pam file is only for the greeter, not for > > Yves-Alexis> session run from them (they're handled by > > Yves-Alexis> /etc/pam.d/lightdm which correctly includes the common > > Yves-Alexis> debian files. > > > > People who authenticate only via ldap --- for whom pam_unix.so doesn't > > work --- cannot log in, because username and password are not know to > > pam_unix.so only to either pam_ldap.so or pam_sssd.so. I imagine > > other authentication mechanisms will also fail. > > > > What's more if there's any other policy set in common-account or > > common-session, it's not obeyed (e.g., time-of-use or group membership > > restrictions) > > I'm pretty puzzled by this. Can you exactly describe what happens, > starting from when the greeter starts, and provide some logs? > > As I already wrote, my feeling was that /etc/pam.d/lightdm-greeter was > *not* used for user authentication, so it should even matter in your > case. > Any news on this? - -- Yves-Alexis Perez -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux)
iQEcBAEBCgAGBQJSz6ioAAoJEG3bU/KmdcClWakIAJqwiICqQ/xxeClRo6W/CsSg 6q9iAip4GTvC9hN+tU4WUKXZ9wGkV2Oo7G2MgJHdxBgys3U/VJr9zyY+u1tWGN+I t7zriGr4xnXoD+TNgfD/Ct5o0kywZh7llYAg1R/b565/CoU2yy6dwuPIqaRM15tU kZ0nqFpoyiNnSF3tisa9wtWEbh0b6rcEL6eOmQ0cS9X3ePwDwu2D24bi1CF0fOQY Vs7ftZkNHOsvklWX6YPAC/8BbITsvm5iB7NkgO+/ugZfd0oPaeAfRkjV+CksmCpS bLW2+oKJ8iH7FG7QERW100gXSm1HFOD4Z+BFUbvSMMlXycnfxVC6yKcxLcsaIPs= =w7Bj -----END PGP SIGNATURE----- -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
