On Thu 02 Feb 2012 at 20:25:15 +0100, Yves-Alexis Perez wrote: > On jeu., 2012-02-02 at 18:28 +0000, Brian Potkin wrote: > > > > Is that a reference to using > > > > session optional pam_loginuid.so > > > > in /etc/pam.d/common-session? That also works me and has the > > advantages > > of being a single configuration change and having a Consolekit session > > marked as 'active = TRUE' and 'is-local = TRUE'. I'd be supportive of > > including a description of this method in README.Debian if it were to > > help a significant number of startx users. > > > > > I don't know what you did different, but just adding the snippet at the > end of /etc/pam.d/common-session doesn't give me active=TRUE and > is-local=TRUE here.
This is the relevant portion of my common-session: # here are the per-package modules (the "Primary" block) session [default=1] pam_permit.so # here's the fallback if no module succeeds session requisite pam_deny.so # prime the stack with a positive return value if there isn't one already; # this avoids us returning an error just because nothing sets a success code # since the modules above will each just jump around session required pam_permit.so # and here are more per-package modules (the "Additional" block) session required pam_unix.so #brian added this next line for startx with xfce4 session optional pam_loginuid.so session optional pam_ck_connector.so nox11 # end of pam-auth-update config As you can see, it is before 'session optional pam_ck_connector.so nox11'. I have no expertise in PAM so cannot explain why it has to be in this position. I have seen the odd report or two that even doing this does not give the desired outcome with startx. I've also come across people recommending removing 'nox11' but I do not understand the significance of that. Hopefully, repositioning the snippet will give you the same outcome as I get. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
