On Tue, Dec 14, 2010 at 01:22:22AM -0000, Max Bowsher wrote: > It's far from uncommon to use su in startup scripts - even ones crafted > by local sysadmins. I don't think defining 'su' to start a CK session is > the right thing to do.
su *is* the wrong tool to use for starting services, because su *is* defined to start PAM sessions. pam_ck_connector is not the only PAM module that may get called by su that shouldn't be called when starting a service - such as pam_limits, to pick one commented out example from /etc/pam.d/su itself. That local sysadmins *may* make uninformed choices when writing their init scripts doesn't change the fact that you don't want to start a PAM session from an init script, and the adverse interactions with pam_ck_connect are only one symptom of this. -- Steve Langasek Give me a lever long enough and a Free OS Debian Developer to set it on, and I can move the world. Ubuntu Developer http://www.debian.org/ [email protected] [email protected] -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/395281 Title: pam_ck_connector.so is called for non-login sessions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
