summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorRay Strode <rstrode@redhat.com>2016-09-07 14:37:24 -0400
committerRay Strode <rstrode@redhat.com>2016-09-07 14:39:25 -0400
commit154b45107998b0fa4b8c8c84337593bf0d468f12 (patch)
treecc0186fa5f3c218b109e489fc4d236add1c632ca
parentf0ec5976544231be434bbf7c710645aaa1f7338d (diff)
downloadgdm-154b45107998b0fa4b8c8c84337593bf0d468f12.tar.gz
pam-exherbo,pam-redhat: avoid password-auth/common-auth
In theory sending the password to them could be beneficial. If for instance, they have pam_krb5 or pam_ecryptfs or pam_sss. In practice, the stacks will fail if the passwords don't match, and prevent autologin from continuing. This commit just sidesteps them for now. Eventually, authconfig/et al, will need to get updated to accomodate us.
-rw-r--r--data/pam-exherbo/gdm-autologin.pam3
-rw-r--r--data/pam-redhat/gdm-autologin.pam4
2 files changed, 2 insertions, 5 deletions
diff --git a/data/pam-exherbo/gdm-autologin.pam b/data/pam-exherbo/gdm-autologin.pam
index 61f8e547..1324f36d 100644
--- a/data/pam-exherbo/gdm-autologin.pam
+++ b/data/pam-exherbo/gdm-autologin.pam
@@ -2,8 +2,7 @@
# except for the authentication method, which is:
# always permit login
-auth [success=ok default=2] pam_gdm.so
-auth substack system-local-login
+auth [success=ok default=1] pam_gdm.so
-auth optional pam_gnome_keyring.so
auth sufficient pam_permit.so
diff --git a/data/pam-redhat/gdm-autologin.pam b/data/pam-redhat/gdm-autologin.pam
index 823c87a5..c31ff27a 100644
--- a/data/pam-redhat/gdm-autologin.pam
+++ b/data/pam-redhat/gdm-autologin.pam
@@ -1,8 +1,6 @@
#%PAM-1.0
-auth [success=ok default=3] pam_gdm.so
+auth [success=ok default=1] pam_gdm.so
-auth optional pam_gnome_keyring.so
-auth include password-auth
-auth include postlogin
auth sufficient pam_permit.so
account required pam_nologin.so
account include system-auth