summaryrefslogtreecommitdiff
path: root/data
diff options
context:
space:
mode:
authorMarc-Antoine Perennou <Marc-Antoine@Perennou.com>2012-08-13 20:43:41 +0200
committerMarc-Antoine Perennou <Marc-Antoine@Perennou.com>2012-08-20 16:20:16 +0200
commit327b59d73266f8215b8945d799ce8c84043980ea (patch)
tree30c4e6eb62af977d5581e7a8b01b33cbcb338c54 /data
parentcec255f612950eeff1420c845d56a0b67aaba3dd (diff)
downloadgdm-327b59d73266f8215b8945d799ce8c84043980ea.tar.gz
pam: add exherbo configuration
from Exherbo commit http://git.exherbo.org/gnome.git/commit/?id=fadb3f3b8ad30833618f0695e7564983a059d58e http://bugzilla-attachments.gnome.org/attachment.cgi?id=221058 Signed-off-by: Marc-Antoine Perennou <Marc-Antoine@Perennou.com>
Diffstat (limited to 'data')
-rw-r--r--data/Makefile.am11
-rw-r--r--data/pam-exherbo/gdm-autologin.pam17
-rw-r--r--data/pam-exherbo/gdm-fingerprint.pam17
-rw-r--r--data/pam-exherbo/gdm-launch-environment.pam11
-rw-r--r--data/pam-exherbo/gdm-password.pam18
-rw-r--r--data/pam-exherbo/gdm-smartcard.pam18
6 files changed, 92 insertions, 0 deletions
diff --git a/data/Makefile.am b/data/Makefile.am
index 6a44b405..3ff2e67b 100644
--- a/data/Makefile.am
+++ b/data/Makefile.am
@@ -104,12 +104,23 @@ pam_openembedded_files = pam-openembedded/gdm.pam \
$(NULL)
EXTRA_DIST += $(pam_openembedded_files)
+pam_exherbo_files = pam-redhat/gdm-autologin.pam \
+ pam-exherbo/gdm-launch-environment.pam \
+ pam-exherbo/gdm-fingerprint.pam \
+ pam-exherbo/gdm-smartcard.pam \
+ pam-exherbo/gdm-password.pam \
+ $(NULL)
+EXTRA_DIST += $(pam_exherbo_files)
+
if ENABLE_REDHAT_PAM_CONFIG
pam_files = $(pam_redhat_files)
endif
if ENABLE_OPENEMBEDDED_PAM_CONFIG
pam_files = $(pam_openembedded_files)
endif
+if ENABLE_EXHERBO_PAM_CONFIG
+pam_files = $(pam_exherbo_files)
+endif
EXTRA_DIST += \
$(schemas_in_files) \
diff --git a/data/pam-exherbo/gdm-autologin.pam b/data/pam-exherbo/gdm-autologin.pam
new file mode 100644
index 00000000..71556e81
--- /dev/null
+++ b/data/pam-exherbo/gdm-autologin.pam
@@ -0,0 +1,17 @@
+# mirrors system-auth / system(-local)-login
+# except for the authentication method, which is:
+# always permit login
+
+auth required pam_env.so
+auth required pam_tally.so file=/var/log/faillog onerr=succeed
+auth required pam_shells.so
+auth required pam_nologin.so
+auth required pam_permit.so
+-auth optional pam_gnome_keyring.so
+
+account include system-local-login
+
+password include system-local-login
+
+session include system-local-login
+-session optional pam_gnome_keyring.so auto_start
diff --git a/data/pam-exherbo/gdm-fingerprint.pam b/data/pam-exherbo/gdm-fingerprint.pam
new file mode 100644
index 00000000..15f24fae
--- /dev/null
+++ b/data/pam-exherbo/gdm-fingerprint.pam
@@ -0,0 +1,17 @@
+# mirrors system-auth / system(-local)-login
+# except for the authentication method, which is:
+# fingerprint login
+
+auth required pam_env.so
+auth required pam_tally.so file=/var/log/faillog onerr=succeed
+auth required pam_shells.so
+auth required pam_nologin.so
+auth required pam_fprintd.so
+-auth optional pam_gnome_keyring.so
+
+account include system-local-login
+
+password include system-local-login
+
+session include system-local-login
+-session optional pam_gnome_keyring.so auto_start
diff --git a/data/pam-exherbo/gdm-launch-environment.pam b/data/pam-exherbo/gdm-launch-environment.pam
new file mode 100644
index 00000000..1c96229f
--- /dev/null
+++ b/data/pam-exherbo/gdm-launch-environment.pam
@@ -0,0 +1,11 @@
+# this is for the session that gdm spawns to show the login screen
+
+auth required pam_env.so
+auth required pam_nologin.so
+auth required pam_permit.so
+
+account include system-local-login
+
+password include system-local-login
+
+session include system-local-login
diff --git a/data/pam-exherbo/gdm-password.pam b/data/pam-exherbo/gdm-password.pam
new file mode 100644
index 00000000..3ad9ce5c
--- /dev/null
+++ b/data/pam-exherbo/gdm-password.pam
@@ -0,0 +1,18 @@
+# mirrors system-auth / system(-local)-login
+# except for the authentication method, which is:
+# password login
+
+auth required pam_env.so
+auth required pam_tally.so file=/var/log/faillog onerr=succeed
+auth required pam_shells.so
+auth required pam_nologin.so
+auth required pam_unix.so try_first_pass likeauth nullok
+-auth optional pam_gnome_keyring.so
+
+account include system-local-login
+
+password include system-local-login
+
+session include system-local-login
+-session optional pam_gnome_keyring.so auto_start
+
diff --git a/data/pam-exherbo/gdm-smartcard.pam b/data/pam-exherbo/gdm-smartcard.pam
new file mode 100644
index 00000000..0623c6ed
--- /dev/null
+++ b/data/pam-exherbo/gdm-smartcard.pam
@@ -0,0 +1,18 @@
+# mirrors system-auth / system(-local)-login
+# except for the authentication method, which is:
+# smartcard login
+
+auth required pam_env.so
+auth required pam_tally.so file=/var/log/faillog onerr=succeed
+auth required pam_shells.so
+auth required pam_nologin.so
+auth [success=done ignore=ignore default=die] pam_pkcs11.so wait_for_card card_only
+-auth optional pam_gnome_keyring.so
+
+account include system-local-login
+
+password include system-local-login
+
+session include system-local-login
+-session optional pam_gnome_keyring.so auto_start
+