Bug 822496 - authconfig doesn't allow to configure all installed pam modules
Summary: authconfig doesn't allow to configure all installed pam modules
Keywords:
Status: CLOSED NOTABUG
Alias: None
Product: Fedora
Classification: Fedora
Component: authconfig
Version: 17
Hardware: x86_64
OS: Linux
unspecified
medium
Target Milestone: ---
Assignee: Tomas Mraz
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2012-05-17 14:23 UTC by Dirk Heinrichs
Modified: 2012-05-18 11:24 UTC (History)
1 user (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2012-05-18 07:33:24 UTC
Type: Bug
Embargoed:


Attachments (Terms of Use)

Description Dirk Heinrichs 2012-05-17 14:23:51 UTC
Description of problem:
I installed pam_ssh and pam_afs_session, then ran authconfig(-tui). Neither module occurs in the list of pam modules, so I had to configure them manually. Needless to say, if I use the tool again, it would overwrite my changes.

Version-Release number of selected component (if applicable):
6.2.1-1.fc17

How reproducible:
Always

Steps to Reproduce:
1. Install pam_ssh or pam_afs_session
2. Run authconfig-tui to enable them
3.
  
Actual results:
New pam modules don't appear in the list.

Expected results:
New pam modules should appear in the list, so that they can be selected and would be configured correctly.

Additional info:

Comment 1 Tomas Mraz 2012-05-18 07:33:24 UTC
authconfig purpose is not to configure any pam module that can be installed. If you want to customize the pam configuration you need to replace the {system-,password-,fingerprint-,smartcard-}auth symlinks pointing to the *-ac files to point to different files with your customized configuration. Authconfig will never modify the symlinks.

See also system-auth-ac manual page.

Comment 2 Dirk Heinrichs 2012-05-18 11:24:00 UTC
(In reply to comment #1)

> authconfig purpose is not to configure any pam module that can be installed.

Hmm, what's it worth, then? Maybe Fedora folks should take a look at Debians pam-auth-update for some inspiration ;)


Note You need to log in before you can comment on or make changes to this bug.