Changeset 1021

Timestamp:

02/09/06 17:29:55 (3 years ago)

Author:

tushar

Message:

Update Hint: execute-session-scripts-using-kdm-and-pam

Files:

• trunk/execute-session-scripts-using-kdm-and-pam.txt (modified) (7 diffs)

trunk/execute-session-scripts-using-kdm-and-pam.txt

@@ -1 +1 @@
-AUTHOR: Stef Bon <stef at bononline dot nl>
-
-15
+30
-
-LICENSE: GNU Free Documentation License Version 1.2
@@ -25 +25 @@
-I use PAM and a module called pam_script to store the credentials provided at
-login (the username and the password!!) for authentication against SMB servers, when 
-
+ or browsing the network with fusesmb
-This looks a little bit like Single Sign On, but it isn't!! The credentials are stored in 
-
+ and ~/.smb/fusesmb.conf
-But somebody can still find them being root, or with a LiveCD. The credentials are stored
-plaintext, no encryption!!
@@ -48 +48 @@
-2.2 Adjusting pam configuration
-2.3 Creating the onauth script
+3. TODO and suggestions
-
-
@@ -107 +108 @@
-The files in these directories must be accessible for every ordinary user: 
-therefore the permissions are 755. 
-
+l
-
-Every user should be able to execute the script, but only root is able to modify 
@@ -253 +254 @@
-they inherit the faults. 'w' does some extra checking, which makes it more 
-usable. 
+
-Other pammodules, like pam_mount, have other ways to keep track of the amount of logins 
-per user. With pam_mount a seperate file (/var/run/pam_mount/$userid) is created for
-this purpose.
+
-Anyone knowing a better way to determine how many times a user is logged 
-in, please let me know.
@@ -269 +272 @@
-
-
+3. TODO and suggestions
+-----------------------
+
+The construction is working, but is not complete:
+
+- it does no logging and proper userfeedback (on the screen) 
+with the hint xconsole_setup.txt (unmaintained: in hints/downloads/files)
+you'll find a way to launch xconsole at startup by root. Using logger and 
+adjusting /etc/syslog.conf it's possible to write messages to it, which
+appear just before the splash screen of KDE comes up.
+
+
+- scripts are executed in the order the command
+
+for script in /etc/session.d/kdm/startup/*.sh; do
+
+works.
+
+Maybe there should be an order. Some scripts first and others later. Just like
+the rc script works to start and stop scripts in the /etc/rc.d structure.
+
+
+- I'm testing FreeNX now. It turns your desktop into a terminalserver for
+X11 sessions. You should test it!
+There is a hint for LFS already!! 
+It does not work with KDM, so does nothing with the construction I'm using.
+I'll check this is a sollution.
+
+
-ACKNOWLEDGEMENTS:
-  * Thanks to the author of pam_script, Izak Burger, for his module and 
@@ -276 +308 @@
-[2006-01-15]
-  * Initial hint.
+[2006-01-30]
+  * added chapter 3. TODO and suggestions
+
+TODO:
+  * add logging via xconsole