Package: libpam-mount Version: 0.33-1 Severity: normal -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
/usr/share/doc/libpam-pammount/README.Debian.gz suggests that its integration is as easy as appending "@include common-pammount" to the PAM configs for relevant services. However, it doesn't work with the stock /etc/pam.d/gdm, and has the potential to cause problems with other configurations as well. The problem that i ran into was that gdm's stock PAM config contains the gnome-keyring PAM module -- when this PAM module's session config runs, it needs access to the user's homedir. But if pam-mount is required to mount the homedir, then it should be placed above the gnome-keyring module, not appended to it. Also, other PAM configs seem to be more often broken out by type (i.e. auth listed together, session listed together, etc), and common-pammount doesn't follow that convention. This makes it difficult to place the auth module in the right position relative to other auth modules while still placing the session module in the right position relative to other session modules. Given these problems, the fact that there are only two lines in common-pammount, and that administrators probably need to explicitly decide between "required" and "optional", it seems to me like it would be better to remove the common-pammount configuration file entirely, and to rewrite /usr/share/doc/libpam-mount/README.Debian.gz with slightly more complex (but actually functional) instructions, maybe with an example for a recent GDM or other service config. See the comments here for more discussion: https://www.debian-administration.org/users/dkg/weblog/30 Thanks for maintaining pam-mount in debian! --dkg - -- System Information: Debian Release: lenny/sid APT prefers testing APT policy: (500, 'testing'), (200, 'unstable'), (101, 'experimental') Architecture: i386 (i686) Kernel: Linux 2.6.24-1-686 (SMP w/1 CPU core) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/bash Versions of packages libpam-mount depends on: ii debconf 1.5.21 Debian configuration management sy ii libc6 2.7-10 GNU C Library: Shared libraries ii libhx10 1.15-1 A library providing queue, tree, I ii libpam0g 0.99.7.1-6 Pluggable Authentication Modules l ii libssl0.9.8 0.9.8g-10 SSL shared libraries ii libxml-writer-perl 0.604-1 Perl module for writing XML docume ii libxml2 2.6.32.dfsg-2 GNOME XML library ii mount 2.13.1.1-1 Tools for mounting and manipulatin libpam-mount recommends no packages. - -- debconf information excluded -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) iQIVAwUBSC3IkczS7ZTSFznpAQKArg//dufuInbNj7YtSDLFZHxXDyS6ypFV/O7n gnvXL0tX9gyZkt+hxZ7cMyhtGDiGXfGI+vI7Pn1fCeiM9kDahMWhmaF6PI+skNte 22vT+pHAWDsUkFrHL+GLS0DM6jlruu+GUDtyGqexmFcnsVLiFtlxSK8egtEQow2L jMEaiJlUXn9FnH2lAHPJI01BlY5DhYR4JuSh0tKgP1bpRvEuAoC//JrVii9ZoBYY hrXZ8+FWkAqCXVTNFs1NhohqgguwLGY04HTqINOeb7qIfZsyi+Bzty162V4t0fyP ZGxGPphuZjM9krXKde9bna/fNkV+TVqbp1UP8EV0f+hato6shyOjF8tZ1J7OCEMA kinkQ1F8VOzOT9rUmygIJUEBJzQ3PcfigTwG2rz3JBpNQe/ZI+tODKrl+c2zvRGb gl2BnJLCyOhk9KQton/woDql3fErNP5sZKrGb9zPxqhI4NP3Wh8bqryFJhae+dCA LmzIX8A3ng8slTC47h+GorhwBFsVr8ujjP3687KobD7AY7vvR0hSjFMJpjKYPHBb K52cRf36cD6LBN2MZrJDjZy62rSqZpjOKxqRNs/YyR66Ue8OZSOSd2JaKgCRsQqm Eqm4ZnEsf5vRAeyAUNVaLqeaFukcBcuLBduFaLZBuKvNBK766k1nGr+iBMNiiqm1 Tz0Tj4wZ7yQ= =v/Uf -----END PGP SIGNATURE----- -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
