David Markey schrieb:

This indeed is a very powerful tool.

Now heres one, Password passthrough from NSCM login -> Windows Connector. Do we have any options for this? We have developed something similar in our research group for dtlogin/gdm->rdesktop password passthrough.


Depending on how you have done this, your solution may work for NSCM too.

I assume that you have a home made PAM module that grabs the entered password and stores it somewhere for later feeding to rdesktop (it is the only solution I can think of offhand). The password storage would be readable only for the user to which the password belongs.

I've done such things in the past, but only to stash away a hashed form of the password. If you do this with cleartext passwords, the security is more brittle.

If you add such a PAM module to the utnsclogin PAM stack, it should work just the same.

Things get more complicated, if you use NSCM with kiosk mode (for seamless fullscreen Windows), as the kiosk session will have no access to data owned by the NSCM user, but the future kiosk account is not yet known. Here you'd need a KIOSK_SESSION_PRE script (which runs as root) to move the data from wherever it is stored to the kiosk session $HOME and change the ownership.

- Jörg

--
Joerg Barfurth           phone: +49 40 23646662 / x66662
Software Engineer        mailto:[email protected]
Desktop Technology       http://reserv.ireland/twiki/bin/view/Argus/
Thin Client Software     http://www.sun.com/software/sunray/
Sun Microsystems GmbH    http://www.sun.com/software/javadesktopsystem/


_______________________________________________
SunRay-Users mailing list
[email protected]
http://www.filibeto.org/mailman/listinfo/sunray-users

Reply via email to