On 12-09-22 04:37 AM, Stéphane Graber wrote: > On 12-09-21 07:28 PM, James McQuillan wrote: > > Scott Balneaves has spent quite a bit of time PAM-ifing the login > > manager to facilitate password expiration. it's not ready for > > production > > use yet but he's made some great progress.
> Right, that was the reason for my response on the Launchpad bug. > Ubuntu introduced RDP support into lightdm this cycle, so my hope is > to switch to Scott's libnss-ssh and libpam-ssh and kill ldm for good at > this upcoming hackfest. > > I think that if I can spend a good 5-6 hours on the problem, we > should > have something that's "functional" at the hackfest (where functional, > means getting a greeter and being able to login). We've been doing some testing with lightdm + libpam-sshauth + libnss-sshsock over here and it mostly works. The current hack is available here if you want to test it out: https://github.com/opinsys/ltsp-lightdm libpam-ssauth and libnss-sshsock still have rough edges that need to be worked out. E.g. what to do with the control tunnel that is currently opened as root. With kerberos+ldap lightdm works quite nicely with the hack, so it should be possible to make it all work. The nice thing is that all that is required is a change in PAM stack. Here's what I wrote about the situation earlier on ltsp-developer: http://marc.info/?l=ltsp-developer&m=134425841703630&w=2 Currently the hack should work on any *DM. We really have no need to use anything else besides lightdm, but we've been trying to stay away from using any lightdm specific features. Because of this the session launching is also a bit hacky at the moment. I haven't yet checked how the RDP support in lightdm is implemented. Veli-Matti ------------------------------------------------------------------------------ Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ _____________________________________________________________________ Ltsp-discuss mailing list. To un-subscribe, or change prefs, goto: https://lists.sourceforge.net/lists/listinfo/ltsp-discuss For additional LTSP help, try #ltsp channel on irc.freenode.net