Bug 77452

Summary:	[RFE] Should be able to configure pam_timestamp duration
Product:	[Fedora] Fedora	Reporter:	Mike Hearn <m.hearn>
Component:	pam	Assignee:	Tomas Mraz <tmraz>
Status:	CLOSED RAWHIDE	QA Contact:	Jay Turner <jturner>
Severity:	medium	Docs Contact:
Priority:	medium
Version:	rawhide	CC:	srevivo
Target Milestone:	---	Keywords:	FutureFeature
Target Release:	---
Hardware:	i386
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Enhancement
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2006-02-01 17:55:40 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	150221

Description Mike Hearn 2002-11-07 09:44:50 UTC

I love how when you use something from the gui that requires root, the key
appears in the tray area and I don't have to reauthenticate while it's there. I
think 5 minutes is too short however, and would like to be able to configure it
as a number (rather than say a slider), with an option so that it never expires,
and I have to manually give it up (good for days when i'm feeling lazy).

Comment 1 Tomas Mraz 2005-05-24 17:34:08 UTC

The pam_timestamp already supports timestamp_timeout option to set the timeout
for the validity of the timestamp. However to be able to set it from gui it's
necessary first to modify all services config in /etc/pam.d/ which use
pam_timestamp to include one file with pam_timestamp in it which would be
modified from the gui.

Comment 2 Tomas Mraz 2006-02-01 17:55:40 UTC

There is now common /etc/pam.d/config-util configuration file which allows you
to set the pam_timestamp duration. After some discussions I've decided to not
implement GUI interface for this. The functionality of the system wouldn't be
improved much by this.

So the bug is fixed - you are now able to configure the duration although only
by editing the config-util file.