So it looks up the service name on a per-display basis. If the mapping of
display names for xdmcp is normally static, it's still simpler to add the
"trusted" local displays to /etc/securetty instead of munging the PAM
config, I think.
--
Steve Langasek Give me a lever long enough and a Free OS
Debian Developer to set it on, and I can move the world.
Ubuntu Developer http://www.debian.org/
<email address hidden> <email address hidden>
On Thu, Jul 31, 2008 at 08:34:43AM -0000, Sebastien Bacher wrote:
> > Do xdmcp and the standard greeter declare separate PAM service names?
> not that I know no but I'm not a pam expert and you might want to look
> at the code to make sure that's not the case
The gdm code does the following to decide what service name to use:
pam_stack = gdm_daemon_ config_ get_value_ string_ per_display (GDM_KEY_PAM_STACK,
(char *)d->name);
So it looks up the service name on a per-display basis. If the mapping of
display names for xdmcp is normally static, it's still simpler to add the
"trusted" local displays to /etc/securetty instead of munging the PAM
config, I think.
-- www.debian. org/
Steve Langasek Give me a lever long enough and a Free OS
Debian Developer to set it on, and I can move the world.
Ubuntu Developer http://
<email address hidden> <email address hidden>