[Pkg-xfce-devel] Bug#717297: lightdm: pam.d/lightdm-greeter doesn't use system settings for pam

[Peter Chubb]

Package: lightdm
Version: 1.6.0-3
Severity: normal

Dear Maintainer,
We're running in an environment that authenticates via ldap, using sssd
locally.  But pam.d/lightdm-greeter doesn't use common-session etc., so
the updates that sssd's installation did to pam.d/common-xxx don't apply.

I think that pam-greeter should use all the appropriate common-xxx files
in pam.d to manage authentication and so on, so that whatever the admin
has set up for authentication is obeyed by lightdm.  As can be seen from
the attached file, I `fixed' it for now by manually adding an appropriate
pam_sssd line.


-- System Information:
Debian Release: jessie/sid
  APT prefers testing
  APT policy: (990, 'testing'), (500, 'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 3.9-1-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_AU.UTF-8, LC_CTYPE=en_AU.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages lightdm depends on:
ii  adduser                                3.113+nmu3
ii  consolekit                             0.4.5-3.1
ii  dbus                                   1.6.12-1
ii  debconf [debconf-2.0]                  1.5.50
ii  libc6                                  2.17-7
ii  libgcrypt11                            1.5.2-3
ii  libglib2.0-0                           2.36.3-3
ii  libpam0g                               1.1.3-9
ii  libxcb1                                1.9.1-3
ii  libxdmcp6                              1:1.1.1-1
ii  lightdm-gtk-greeter [lightdm-greeter]  1.6.0-1

Versions of packages lightdm recommends:
ii  xserver-xorg  1:7.7+3

Versions of packages lightdm suggests:
ii  accountsservice  0.6.34-1
ii  upower           0.9.20-2

-- Configuration Files:
/etc/lightdm/lightdm.conf changed:
[LightDM]
[SeatDefaults]
xserver-allow-tcp=false
greeter-session=lightdm-greeter
greeter-hide-users=true
user-session=xfce
session-wrapper=/etc/X11/Xsession
[XDMCPServer]
[VNCServer]

/etc/pam.d/lightdm-greeter changed:
auth      required pam_env.so envfile=/etc/default/locale
auth      required pam_permit.so
account   required pam_permit.so
password  required pam_deny.so
session   required pam_unix.so
session	  optional pam_sssd.so


-- debconf information:
  lightdm/daemon_name: /usr/sbin/lightdm
* shared/default-x-display-manager: lightdm