[Bug 351442] New: pam_mount fails to update common-auth and common-session
https://bugzilla.novell.com/show_bug.cgi?id=351442 Summary: pam_mount fails to update common-auth and common-session Product: openSUSE 10.3 Version: Final Platform: i586 OS/Version: openSUSE 10.3 Status: NEW Severity: Major Priority: P5 - None Component: Basesystem AssignedTo: bnc-team-screening@forge.provo.novell.com ReportedBy: jrobiso2@ford.com QAContact: qa@suse.de Found By: Beta-Customer The pam_mount rpm, when installed, does not update /etc/pam.d/common-auth or common-session, both of which are required in order to work. Hand editing these files is dangerous for those not familiar enough with pam. I can verify this as I have had to use a live CD in the past to restore backup pam files after I edited them ... and screwed them up. As the file entries are dependent on what type of user authentication is being used (i.e. "If you use pam_ldap, pam_winbind, or any other authentication services that make use of PAM's sufficient keyword, . . .") it isn't a trivial matter to incorporate scripts into the rpm to handle this. However, it must be considered for work for 11.0, and I believe should be fixed for 10.3 and sent out as an update. This will also require modification of the "user authentication" setup items in YaST as well to ensure they respect the use of pam_mount. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=351442 User kukuk@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=351442#c1 Thorsten Kukuk <kukuk@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution| |INVALID --- Comment #1 from Thorsten Kukuk <kukuk@novell.com> 2008-01-03 13:00:03 MST --- Adding pam_mount unconfigured during installation is a bad idea. Adding it to the common-* files is even more worse. At first you have to configure pam_mount. Depending on your configuration, you have to enable pam_mount for the services where it makes sense. This can be done with pam-config (see manual page). -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=351442 User jrobiso2@ford.com added comment https://bugzilla.novell.com/show_bug.cgi?id=351442#c2 --- Comment #2 from Jonathon Robison <jrobiso2@ford.com> 2008-01-03 13:06:08 MST --- Hmm. OK. Shows what an old fart I am - never even knew pam-config existed. Always did it by hand, sometimes with very disastrous results. Question - can the things that pam-config do be done in a gui? Should they? I guess that's the real core of my bug entry. pam_mount configuration should be graphical, in YaST. At least that's my opinion. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
participants (1)
-
bugzilla_noreply@novell.com