The pam_unix module in Ubuntu supports granting access to passwordless
accounts by way of the 'nullok_secure' option, which says: accounts with
a null password field are allowed access, as long as the connection is
on a "secure" tty (defined by /etc/securetty).  This is already in
effect by default for all services, including gdm; I don't think it's
appropriate to have two separate mechanisms for configuring passwordless
logins on the system.  Adding a special group to the system is, in
particular, a design that's rather unnecessarily complex.

(The nullok_secure support in pam_unix is still in need of upstreaming
to Linux-PAM, so it's understandable that gdm upstream isn't using that
instead; still, I don't think we want this patch.)

-- 
Update PAM policy to allow password-less logins set up via users-admin
https://bugs.launchpad.net/bugs/393854
You received this bug notification because you are a member of Ubuntu
Bugs, which is a direct subscriber.

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to