Re: [SunRay-Users] [gdm-list] gdm 2.20 and SunRay

2011-01-05 Thread Meik Hellmund
Brian, many thanks for your detailed response. Should we continue this discussion in gdm-list or in sunray-users list? Brian Cameron brian.came...@oracle.com wrote: We observed that the 57 gconfd daemons somehow blocked each other(?) (status D in the process list) and the load factor of

[SunRay-Users] PAM configuration on Solaris

2011-01-05 Thread William Yang
I was working on overhauling our PAM configuration today and wondered, as before, what the dtsession-SunRay entries are for. As far as I can tell, dtsession is only for unlocking a locked CDE session, and this IBM link (http://publib.boulder.ibm.com/infocenter/aix/v6r1/index.jsp?topic=/com.ibm.

Re: [SunRay-Users] [gdm-list] gdm 2.20 and SunRay

2011-01-05 Thread Meik Hellmund
On Wed, 05 Jan 2011 09:43:21 -0600 Brian Cameron brian.came...@oracle.com wrote: Meik: This bugpatch is about the $HOME/.gconf directory. After updating my gconfd from 2.28 to 2.32 this works for me and I have now a per-session .gconf directory This should make GConf behave better

Re: [SunRay-Users] PAM configuration on Solaris

2011-01-05 Thread Bob Doolittle
Yes, dtlogin is just for CDE. However, it's incorrect to say that only the auth stack is used (thanks IBM). The other stacks are all important: account is for accounting, if you want to user logins/logouts to be logged (which is sort of the main point IMO). password is to implement password

Re: [SunRay-Users] PAM configuration on Solaris

2011-01-05 Thread Bob Doolittle
Slight mis-statement: On 01/05/11 17:16, Bob Doolittle wrote: utnsclogin doesn't need these, because it's not actually a Display Manager - it doesn't manage displays/sessions. It only does authentication and potentially redirection to the server hosting the token's session (if a session

Re: [SunRay-Users] PAM configuration on Solaris

2011-01-05 Thread William Yang
Hi Bob, Thanks for the reply. That was very informative, along with your other clarification e-mail. I think you misread part of my initial question though. While all of the 4 PAM sections dtlogin-SunRay are used, what about for dtSESSION-SunRay (which was my original question)? Also, does

Re: [SunRay-Users] PAM configuration on Solaris

2011-01-05 Thread William Yang
If I understand correctly, that means two invocations of PAM are actually used. But does that mean there is no way to handle users' expired passwords? Normally under dtlogin, if the account password is expired, they are prompted to change it when the auth module succeeds but the account module