[arch-general] shadow 4.1.4.3-1: hyphen in /etc/pam.d/login
Hi all, investigating some trouble with mounting of external usb-disks recently, I went through /etc/ and stumbled over an entry in the shadow packages default /etc/pam.d/login (last three lines): session optional pam_lastlog.so session optional pam_loginuid.so -session optional pam_ck_connector.so nox11 Removing the leading hyphen on the last line I got rid of trouble with usb-disks, but I'm not sure... was this intentional - like commented out, or is there a typo in the packages defaults? Regards, Martin
Hello, Martin Feilhauer:
Hi all,
investigating some trouble with mounting of external usb-disks recently, I went through /etc/ and stumbled over an entry in the shadow packages default /etc/pam.d/login (last three lines):
session optional pam_lastlog.so session optional pam_loginuid.so -session optional pam_ck_connector.so nox11
Removing the leading hyphen on the last line I got rid of trouble with usb-disks, but I'm not sure... was this intentional - like commented out, or is there a typo in the packages defaults?
The hyphen does not make the line a comment, that's what # does (see pam.d(5)). -- Wieland
On 04/19/2011 05:32 PM, Martin Feilhauer wrote:
Hi all,
investigating some trouble with mounting of external usb-disks recently, I went through /etc/ and stumbled over an entry in the shadow packages default /etc/pam.d/login (last three lines):
session optional pam_lastlog.so session optional pam_loginuid.so -session optional pam_ck_connector.so nox11
Removing the leading hyphen on the last line I got rid of trouble with usb-disks, but I'm not sure... was this intentional - like commented out, or is there a typo in the packages defaults?
Regards, Martin
that is intended. man pam.d " If the type value from the list above is prepended with a - character the PAM library will not log to the system log if it is not possible to load the module because it is missing in the system. This can be useful especially for modules which are not always installed on the system and are not required for correct authentication and authorization of the login session." -- Ionuț
participants (3)
-
Ionuț Bîru
-
Martin Feilhauer
-
Wieland Hoffmann