Bug 665063

Summary: add support for the postlogin PAM stack to passwd
Product: [Fedora] Fedora Reporter: Paolo Bonzini <pbonzini>
Component: passwdAssignee: Tomas Mraz <tmraz>
Status: CLOSED RAWHIDE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: medium Docs Contact:
Priority: low    
Version: rawhideCC: ascii79, dwmw2, mhlavink, pbonzini, piergiorgio.sartor, psplicha, tmraz
Target Milestone: ---Keywords: FutureFeature
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: passwd-0.78-3.fc15 Doc Type: Enhancement
Doc Text:
Story Points: ---
Clone Of: 486152 Environment:
Last Closed: 2011-02-08 21:16:00 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 665059    
Bug Blocks: 486152, 617282    
Attachments:
Description Flags
patch to the package pbonzini: review?

Description Paolo Bonzini 2010-12-22 15:46:17 UTC
In order to use the automount feature of ecryptfs, for the ~/Private folder, some modifications to /etc/pam.d/system-auth are required.  In order to integrate pam_ecryptfs.so awareness into authconfig, we decided to create a new PAM stack.  This is because of the wide usage of "sufficient" modules for the primary authentication modules (pam_unix, pam_krb5, pam_sss, pam_ldap) in the configurations generated by authconfig.

Comment 1 Paolo Bonzini 2010-12-22 15:58:07 UTC
Created attachment 470228 [details]
patch to the package

Here is the body of the patch:

--- passwd.pamd.postlogin
+++ passwd.pamd
@@ -3,3 +3,4 @@
 account    include	system-auth
 password   substack	system-auth
 -password   optional	pam_gnome_keyring.so use_authtok
+password   substack     postlogin

Comment 2 Paolo Bonzini 2011-02-01 16:15:41 UTC
Comment on attachment 470228 [details]
patch to the package

Patch used to build http://koji.fedoraproject.org//koji/taskinfo?taskID=2754243 -- please review and apply.