Josselin Mouette wrote:
> Le mardi 05 juin 2007 à 17:31 -0700, Josh Triplett a écrit :
>> The RetryDelay configuration option does not seem to have any effect.  Even
>> with RetryDelay=0, gdm still waits several seconds after a failed login
>> attempt.
> 
> The delay code in GDM is currently deactivated. However, as explained in
> the pam_fail_delay manual page, modules can request a minimal delay.
> This is what pam_unix does (support.c:681), which means an application
> cannot request a smaller delay.

From looking at the code in GDM, it doesn't seem to call pam_fail_delay
itself; that code seems disabled.  Instead, it has its own sleep calls.
I didn't realize that pam_unix calls pam_fail_delay itself.

It looks like I can make this delay go away for gdm by putting "nodelay" on
the pam_unix line in /etc/pam.d/gdm (which will require replacing the include
of common-auth with its contents).  However, I don't see any way to reduce the
delay without turning it off completely.

- Josh Triplett

Attachment: signature.asc
Description: OpenPGP digital signature

Reply via email to