On Tue, Apr 13, 2010 at 07:41:04AM -0000, Daniel Richard G. wrote:
> > No, it's persistent unless you disable pam_krb5 entirely. Have you
> tried it?
> Yeah, where pam-auth-update asks you "Override local changes to
> /etc/pam.d/common-*?" I see the man page says something about preserving
> module options, but if I add an option to (say) common-auth, and re-run
> p-a-u, the option is silently blown away. (This is on my Karmic work
> system; has this changed since? I don't see anything in the changelog.)
Er, well, shoot - it turns out there's a bug in pam-auth-update's handling
of module options, that *only* affects modules with numbers in their names
(like pam_krb5) :/ I knew I wasn't imagining that I had tested this code, I
just didn't test it with this module...
I've committed the one-liner fix for this to the Debian package, and will
work on getting this into an SRU for lucid.
--
Steve Langasek Give me a lever long enough and a Free OS
Debian Developer to set it on, and I can move the world.
Ubuntu Developer http://www.debian.org/
<email address hidden> <email address hidden>
On Tue, Apr 13, 2010 at 07:41:04AM -0000, Daniel Richard G. wrote:
> > No, it's persistent unless you disable pam_krb5 entirely. Have you
> tried it?
> Yeah, where pam-auth-update asks you "Override local changes to d/common- *?" I see the man page says something about preserving
> /etc/pam.
> module options, but if I add an option to (say) common-auth, and re-run
> p-a-u, the option is silently blown away. (This is on my Karmic work
> system; has this changed since? I don't see anything in the changelog.)
Er, well, shoot - it turns out there's a bug in pam-auth-update's handling
of module options, that *only* affects modules with numbers in their names
(like pam_krb5) :/ I knew I wasn't imagining that I had tested this code, I
just didn't test it with this module...
I've committed the one-liner fix for this to the Debian package, and will
work on getting this into an SRU for lucid.
-- www.debian. org/
Steve Langasek Give me a lever long enough and a Free OS
Debian Developer to set it on, and I can move the world.
Ubuntu Developer http://
<email address hidden> <email address hidden>