Bug 77452

Summary: [RFE] Should be able to configure pam_timestamp duration
Product: [Fedora] Fedora Reporter: Mike Hearn <m.hearn>
Component: pamAssignee: Tomas Mraz <tmraz>
Status: CLOSED RAWHIDE QA Contact: Jay Turner <jturner>
Severity: medium Docs Contact:
Priority: medium    
Version: rawhideCC: srevivo
Target Milestone: ---Keywords: FutureFeature
Target Release: ---   
Hardware: i386   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Enhancement
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2006-02-01 17:55:40 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Bug Depends On:    
Bug Blocks: 150221    

Description Mike Hearn 2002-11-07 09:44:50 UTC
I love how when you use something from the gui that requires root, the key
appears in the tray area and I don't have to reauthenticate while it's there. I
think 5 minutes is too short however, and would like to be able to configure it
as a number (rather than say a slider), with an option so that it never expires,
and I have to manually give it up (good for days when i'm feeling lazy).

Comment 1 Tomas Mraz 2005-05-24 17:34:08 UTC
The pam_timestamp already supports timestamp_timeout option to set the timeout
for the validity of the timestamp. However to be able to set it from gui it's
necessary first to modify all services config in /etc/pam.d/ which use
pam_timestamp to include one file with pam_timestamp in it which would be
modified from the gui.


Comment 2 Tomas Mraz 2006-02-01 17:55:40 UTC
There is now common /etc/pam.d/config-util configuration file which allows you
to set the pam_timestamp duration. After some discussions I've decided to not
implement GUI interface for this. The functionality of the system wouldn't be
improved much by this.

So the bug is fixed - you are now able to configure the duration although only
by editing the config-util file.