Ubuntu
gdm package

  1. Bug #104957
  2. Comment #13

Comment 13 for bug 104957

Revision history for this message
Steve Langasek (vorlon) wrote : Re: [Bug 104957] Re: users with no password can't log in with gdm

On Thu, Jul 31, 2008 at 08:34:43AM -0000, Sebastien Bacher wrote:
> > Do xdmcp and the standard greeter declare separate PAM service names?

> not that I know no but I'm not a pam expert and you might want to look
> at the code to make sure that's not the case

The gdm code does the following to decide what service name to use:

        pam_stack = gdm_daemon_config_get_value_string_per_display (GDM_KEY_PAM_STACK,
                (char *)d->name);

So it looks up the service name on a per-display basis. If the mapping of
display names for xdmcp is normally static, it's still simpler to add the
"trusted" local displays to /etc/securetty instead of munging the PAM
config, I think.

--
Steve Langasek Give me a lever long enough and a Free OS
Debian Developer to set it on, and I can move the world.
Ubuntu Developer http://www.debian.org/
<email address hidden> <email address hidden>