Not able to configure PAM services
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
Light Display Manager |
Fix Released
|
Medium
|
Robert Ancell | ||
1.10 |
Fix Released
|
Medium
|
Unassigned | ||
lightdm (Ubuntu) |
Fix Released
|
High
|
Robert Ancell | ||
Trusty |
Fix Released
|
High
|
Unassigned | ||
Utopic |
Fix Released
|
High
|
Robert Ancell |
Bug Description
[Impact]
No method to configure PAM services used (hard-coded to "lightdm"). This is required in some cases, e.g. when running Ubuntu on the phone we want to use a different PAM stack. By making this configurable the phone can have a package that overrides the default.
[Test Case]
1. Set a different PAM stack in the LightDM configuration:
[SeatDefaults]
pam-service=
2. Start LightDM
3. Log in
Expected result:
PAM modules in "custom-service" are run, user is logged in.
Observed result:
PAM modules in "lightdm" are run, user is logged in. (feature not yet supported)
[Regression Potential]
Low, fix is just replacing hard-coded values with a configuration lookup. Tested with regression tests.
Related branches
- PS Jenkins bot: Approve (continuous-integration)
- Robert Ancell: Approve
-
Diff: 286 lines (+142/-11)8 files modifieddata/lightdm.conf (+6/-0)
src/lightdm.c (+6/-0)
src/seat.c (+8/-11)
tests/Makefile.am (+4/-0)
tests/scripts/autologin-pam-config.conf (+44/-0)
tests/scripts/login-pam-config.conf (+70/-0)
tests/test-autologin-pam-config (+2/-0)
tests/test-login-pam-config (+2/-0)
Changed in lightdm (Ubuntu): | |
importance: | Undecided → High |
summary: |
- please make use of pam_tally2 with lightdm-greeter + please make use of pam_tally2 for Touch login and screenunlock |
Changed in lightdm: | |
importance: | Undecided → Medium |
status: | New → Fix Committed |
Changed in lightdm (Ubuntu): | |
status: | Incomplete → In Progress |
assignee: | nobody → Robert Ancell (robert-ancell) |
Changed in lightdm: | |
assignee: | nobody → Robert Ancell (robert-ancell) |
milestone: | none → 1.11.5 |
Changed in lightdm: | |
status: | Fix Committed → Fix Released |
milestone: | 1.11.5 → 1.8.8 |
milestone: | 1.8.8 → 1.11.5 |
Changed in ubuntu-touch-session (Ubuntu): | |
importance: | Undecided → Critical |
description: | updated |
summary: |
- please make use of pam_tally2 for Touch login and screenunlock + No method to configure PAM services |
description: | updated |
summary: |
- No method to configure PAM services + Not able to configure PAM services |
Changed in ubuntu-touch-session (Ubuntu Trusty): | |
status: | New → Invalid |
no longer affects: | ubuntu-touch-session (Ubuntu Utopic) |
no longer affects: | ubuntu-touch-session (Ubuntu Trusty) |
no longer affects: | ubuntu-touch-session (Ubuntu) |
Changed in lightdm (Ubuntu Trusty): | |
importance: | Undecided → High |
The lock screen (in Unity) currently uses the lightdm PAM configuration, though this is likely to change in the future (bug 1305440).