William Yang wrote:
Doesn't SRS usually copy the definitions for 'other' when it sets up PAM?

Sometimes. On Linux no, because "other" defaults to "pam_deny.so" (?!?), which is not particularly useful for us to copy :)

For "dtlogin-Sunray" we copy "dtlogin", and if it doesn't exist we copy "other", and if it doesn't exist we make something up.
Ditto for "dtsession-Sunray".
"gdm" and "xscreensaver" can't be subclassed like "dtlogin/dtsession" can, so we have to modify them directly. Unfortunately, on OpenSolaris there is no default "gdm" stack. Copying "other" probably makes sense here.

It's all continually increasing in complexity and frankly we probably try to do too much automatically already in this area. Some day we may have to punt and just document stacks and have people enter them manually but that day has not yet arrived.

Adding LDAP stacks is I'm afraid well off the complexity scale for us to reasonably deal with automatically.

-Bob

-----Original Message-----
From: [email protected] [mailto:sunray-users-
[email protected]] On Behalf Of Lars Tunkrans
Sent: Tuesday, June 16, 2009 3:06 PM
To: SunRay-Users mailing list
Subject: Re: [SunRay-Users] Struggling with srss 4.1 on OpenSolaris
2009.06

Bob Doolittle wrote:
- manual addition to pam.conf (this will be handled automatically in
the final 4.2 release but not EA1 pre-release)

-Bob

_
Hi Bob,

     Will you proviede a version of  pam.conf    for LDAP  based login
as well
   So that we wont need to spend half a day construncting a LDAP
enabled pam.conf for every  SRS  update.

Regards

   //Lars
_______________________________________________
SunRay-Users mailing list
[email protected]
http://www.filibeto.org/mailman/listinfo/sunray-users

_______________________________________________
SunRay-Users mailing list
[email protected]
http://www.filibeto.org/mailman/listinfo/sunray-users

_______________________________________________
SunRay-Users mailing list
[email protected]
http://www.filibeto.org/mailman/listinfo/sunray-users

Reply via email to