** Changed in: gdm (Debian)
       Status: New => Fix Released

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to gdm in Ubuntu.
https://bugs.launchpad.net/bugs/393854

Title:
  Update PAM policy to allow password-less logins set up via users-admin

Status in gdm:
  Fix Released
Status in gdm package in Ubuntu:
  Fix Released
Status in gdm package in Debian:
  Fix Released

Bug description:
  Binary package hint: gdm

  Upstream gnome-system-tools will have in 2.28 an option to allow specified 
users to log in graphically and locally without entering their password. This 
is intended for home users that can't use GDM's autologin because they are 
several on the same computer. A rationale is at:
  
http://markmail.org/message/2h5isyf3kip6updb#query:gdm%20passwordless+page:1+mid:pa6lrzmwdtbol5it+state:results
  and the bug upstream was http://bugzilla.gnome.org/show_bug.cgi?id=414862

  For this to work in Ubuntu, we need to add a rule to the PAM configuration 
file:
  auth       sufficient  pam_succeed_if.so user ingroup nopasswdlogin

  And to create the group 'nopasswdlogin' in the postinstall script.

  Attached is a debdiff that does that. I guess somebody familiar with
  Ubuntu's PAM rules should check it since that's a critical part of the
  system's security, but that way of achieving this has been accepted by
  Brian Cameron (GDM) and Carlos Garnacho (gnome-system-tools) as safe,
  and many users has been using this as a hack for some time.

  This change should also affect gnome-screensaver so that the screen is
  not locked after suspend. I'll post a diff for that too, and for the
  gdm-new package.

  Please ask if you need more explanations about how this works.

To manage notifications about this bug go to:
https://bugs.launchpad.net/gdm/+bug/393854/+subscriptions

-- 
Mailing list: https://launchpad.net/~desktop-packages
Post to     : [email protected]
Unsubscribe : https://launchpad.net/~desktop-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to