Meik Hellmund schrieb:
In my experience,the SRSS installation script simply appends its stuff
to whatever is already configured in /etc/pam.d/{gdm, xscreensaver} and this works.
(It may also generate /etc/pam.d/{utadmingui, utselfreg})
[...]
This is my /etc/pam.d/gdm:
#%PAM-1.0
auth requisite pam_nologin.so
auth required pam_env.so readenv=1
auth required pam_env.so readenv=1 envfile=/etc/default/locale
#Check local authentication first, so root can still login
# while LDAP is down.
auth [success=1 default=ignore] pam_unix.so
auth required pam_ldap.so use_first_pass
auth required pam_permit.so
auth optional pam_gnome_keyring.so
#
account sufficient pam_ldap.so
account required pam_unix.so
#
session required pam_limits.so
session sufficient pam_ldap.so
session required pam_unix.so
session optional pam_gnome_keyring.so auto_start
#
#
# passwd has no ldap entry: users are requested to use a
# Web interface if they want to change their passwords
# (This is due to some local quirks)
password required pam_unix.so nullok obscure min=4 max=8 md5
#
#
# added to gdm by SunRay Server Software -- gdm
auth requisite /opt/SUNWut/lib/sunray_get_user.so.1 property=username
auth required /opt/SUNWut/lib/pam_sunray_amgh.so.1
auth sufficient /opt/SUNWkio/lib/pam_kiosk.so ignoreuser
auth required /opt/SUNWut/lib/sunray_get_user.so.1 prompt
auth required /opt/SUNWut/lib/pam_sunray_amgh.so.1 clearuser
session required /opt/SUNWkio/lib/pam_kiosk.so
session required pam_limits.so
account sufficient /opt/SUNWkio/lib/pam_kiosk.so
This config is also broken - at least from a SRSS POV: Sun Ray really
waynts to *pre*pend its entries to all relevant stacks. If tehy are
coming at the end, like here, some SRSS features (here: AMGH and Kiosk)
won't work as intended.
- Jörg
--
Joerg Barfurth phone: +49 40 23646662 / x66662
Software Engineer mailto:[EMAIL PROTECTED]
Desktop Technology http://reserv.ireland/twiki/bin/view/Argus/
Thin Client Software http://www.sun.com/software/sunray/
Sun Microsystems GmbH http://www.sun.com/software/javadesktopsystem/
_______________________________________________
SunRay-Users mailing list
[email protected]
http://www.filibeto.org/mailman/listinfo/sunray-users
