On Thu, Jul 31, 2008 at 08:34:43AM -0000, Sebastien Bacher wrote:
> > Do xdmcp and the standard greeter declare separate PAM service names?

> not that I know no but I'm not a pam expert and you might want to look
> at the code to make sure that's not the case

The gdm code does the following to decide what service name to use:

        pam_stack = gdm_daemon_config_get_value_string_per_display 
(GDM_KEY_PAM_STACK,
                (char *)d->name);

So it looks up the service name on a per-display basis.  If the mapping of
display names for xdmcp is normally static, it's still simpler to add the
"trusted" local displays to /etc/securetty instead of munging the PAM
config, I think.

-- 
Steve Langasek                   Give me a lever long enough and a Free OS
Debian Developer                   to set it on, and I can move the world.
Ubuntu Developer                                    http://www.debian.org/
[EMAIL PROTECTED]                                     [EMAIL PROTECTED]

-- 
users with no password can't log in with gdm
https://bugs.launchpad.net/bugs/104957
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to