https://bugzilla.novell.com/show_bug.cgi?id=644698 https://bugzilla.novell.com/show_bug.cgi?id=644698#c2 --- Comment #2 from Rob Fortune 2010-10-07 17:54:14 UTC --- That is to say by modifying the pam-config utility... -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=644698 https://bugzilla.novell.com/show_bug.cgi?id=644698#c3 --- Comment #3 from Rob Fortune 2010-10-08 12:45:24 UTC --- I did make the necessary modifications to pam-config for my personal situation in a linkpac on my OBS account. It strikes me as a little strange this is a system written in C. I know it comes from upstream but is pam-config even necessary? YaST could have it's own module and geld pam-config completely, it doesn't seem to do anything majorly useful except keep the modules in the right order and prevent you adding conflicting ones, the configuration it performs could easily be done with a text editor, and IMHO pam-config should be written as shell scripts, it's overkill to do something so simple with a full-blown C package. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=644698 https://bugzilla.novell.com/show_bug.cgi?id=644698#c5 Thomas Göttlicher changed: What |Removed |Added ---------------------------------------------------------------------------- AssignedTo|yast2-maintainers@suse.de |jsuchome@novell.com --- Comment #5 from Thomas Göttlicher 2010-10-19 08:36:49 UTC --- Reassigning to yast2-pam maintainer. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=644698 https://bugzilla.novell.com/show_bug.cgi?id=644698#c7 --- Comment #7 from Rob Fortune 2010-10-20 19:53:05 UTC --- I can't remember what I was doing and I'm not entirely comfortable giving away everything YaST has done on my system by sending a complete log. I would have thought you would know when YaST calls pam-config? I am aware that YaST uses this tool to perform this job, as above I made a linkpac so it stops breaking my pam-config :) Sorry I can't be more helpful on this occasion, but YaST frequently does a lot of unnecessary things, such as if you install a package it will just go ahead and reconfigure gnome and all sorts of unrelated things. Not a problem (albeit a waste of time) if those things are set up OK - I don't think I need to submit my YaST log as it shouldn't be hard to find when YaST calls pam-config. Perhaps pam-config was upgraded and this is what caused it to be re-run? I don't know but it's not very hard with tools like ctags available to work out when YaST calls pam-config is it? And perhaps it wasn't YaST at all - I haven't checked the pam-config RPM but perhaps when it is upgraded it decides to re-run itself. Either way, having it remove entries it doesn't understand is completely wrong. If the user knows how to edit their PAM files they probably know what they are doing and don't need pam-config to go and erase their changes unless they did something blatently stupid like put unix and unix2 in there, checking for which seems to form a large part of the pam-config package. You can go ahead and close it if you really think you need more info, but it's a feature request to get rid of pam-config and replace it with something in YaST itself so you can configure PAM modules with YaST (including custom ones) or at least patch it to not erase things it doesn't understand. I've already modified it for myself so it's not a problem for me but, erasing PAM modules the user chooses to add to their configuration is a complete mistake IMHO. There's "hand-holding" and "crippling baby-sitting". This falls into the latter category. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=644698 https://bugzilla.novell.com/show_bug.cgi?id=644698#c9 Jiří­ Suchomel changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |NEW InfoProvider|rob.fortune@live.com | AssignedTo|jsuchome@novell.com |mc@novell.com --- Comment #9 from Jiří­ Suchomel 2010-10-20 20:48:25 UTC --- I know in what occasions YaST calls pam-config, but these are different calls. As I assume it was just one of those calls that broke your user setting, I'm asking you for the help. And your case was special with your custom files before, but as we do not know which files were modified, we could hardly guess what was broken. To your last paragraph: this would be even more problematic. As you know, automatic changes to PAM files are not easy, so if YaST should work even more high level than pam-config, it would have to use more magic and it would probably fail in more situations. On the other hand, if YaST should work more low-level on PAM files, that would mean more user input would be needed and most users do not know about this stuff so we'd scare them. Reassigning to pam-config maintainer, maybe he can help you... -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=644698 https://bugzilla.novell.com/show_bug.cgi?id=644698#c11 --- Comment #11 from Rob Fortune 2010-10-22 15:27:02 UTC --- OK, that's good. Would you consider also putting it into the comments of the auto-generated pam-config files along with the warning they will be overwritten? Something like "*-pc files are exclusive to pam-config, if you want to do your own custom configuration, remove the symlinks to them and create your own files". ? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.