According to my tests GDM works as expected - checking groups the user belongs to on different terminal emulators (e.g. xterm) proves that the /etc/security/group.conf groups are correctly applied.
The problem in this case affects gnome-terminal alone (and the problem is present also if using e.g. LightDM instead of GDM). This is related to the way gnome-terminal-server is started via DBus and executed under systemd --user. It is started under the systemd-user PAM service, so pam_group entry should be added to /etc/pam.d/systemd-user. The problem is systemd will never apply pam_group settings because it does not call pam_setcred. The issue is reported to systemd along with a PR fixing it: https://github.com/systemd/systemd/issues/11198 ** Bug watch added: github.com/systemd/systemd/issues #11198 https://github.com/systemd/systemd/issues/11198 ** Also affects: gnome-terminal via https://github.com/systemd/systemd/issues/11198 Importance: Unknown Status: Unknown ** Project changed: gnome-terminal => systemd ** Changed in: gnome-terminal (Ubuntu) Status: Confirmed => Invalid ** Also affects: systemd (Ubuntu) Importance: Undecided Status: New -- You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is subscribed to gnome-terminal in Ubuntu. https://bugs.launchpad.net/bugs/1762391 Title: pam_group.so is not evaluated by gnome-terminal To manage notifications about this bug go to: https://bugs.launchpad.net/systemd/+bug/1762391/+subscriptions -- desktop-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
