[23068] in Source-Commits
/svn/athena r22731 - trunk/debathena/config/pam-config/debian
daemon@ATHENA.MIT.EDU (tabbott@MIT.EDU)
Fri Feb 1 18:24:19 2008
Date: Fri, 1 Feb 2008 18:24:07 -0500 (EST)
From: tabbott@MIT.EDU
Message-Id: <200802012324.SAA21115@drugstore.mit.edu>
To: source-commits@MIT.EDU
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Author: tabbott
Date: 2008-02-01 18:24:06 -0500 (Fri, 01 Feb 2008)
New Revision: 22731
Modified:
trunk/debathena/config/pam-config/debian/access.conf.append
trunk/debathena/config/pam-config/debian/changelog
trunk/debathena/config/pam-config/debian/rules
Log:
Modified: trunk/debathena/config/pam-config/debian/access.conf.append
===================================================================
--- trunk/debathena/config/pam-config/debian/access.conf.append 2008-02-01 18:15:00 UTC (rev 22730)
+++ trunk/debathena/config/pam-config/debian/access.conf.append 2008-02-01 23:24:06 UTC (rev 22731)
@@ -10,8 +10,10 @@
# Note that you can use Moira NFS groups here
# See http://debathena.mit.edu/access-controls for details
-# DEFAULT only allow access for users who have local accounts on the
-# machine (i.e. are in /etc/passwd).
+# DEFAULT only allow remote access for users who have local accounts
+# on the machine (i.e. are in /etc/passwd). Allow all other users to
+# login only locally.
+
+:nss-local-users:ALL
--:ALL:ALL
+-:ALL:ALL EXCEPT LOCAL
#DEBATHENA END
Modified: trunk/debathena/config/pam-config/debian/changelog
===================================================================
--- trunk/debathena/config/pam-config/debian/changelog 2008-02-01 18:15:00 UTC (rev 22730)
+++ trunk/debathena/config/pam-config/debian/changelog 2008-02-01 23:24:06 UTC (rev 22731)
@@ -1,3 +1,9 @@
+debathena-pam-config (1.3debathena5) unstable; urgency=low
+
+ * Make access.conf.append mimic Athena workstations more closely.
+
+ -- Tim Abbott <tabbott@mit.edu> Fri, 1 Feb 2008 18:21:09 -0500
+
debathena-pam-config (1.3debathena4) unstable; urgency=low
* Only set XAUTHORITY in /etc/pam.d/ssh due to gdm problems.
Modified: trunk/debathena/config/pam-config/debian/rules
===================================================================
--- trunk/debathena/config/pam-config/debian/rules 2008-02-01 18:15:00 UTC (rev 22730)
+++ trunk/debathena/config/pam-config/debian/rules 2008-02-01 23:24:06 UTC (rev 22731)
@@ -31,7 +31,6 @@
debian/gdm.debathena: $(call debathena_check_conffiles,/etc/pam.d/gdm)
perl -0pe 's/^(\@include common-account)/account\trequired\tpam_access.so\n$$1/m or die' $< > $@
-#and \ s/^(\@include common-session)/session\trequired\tpam_env.so readenv=0 conffile=\/etc\/security\/gdm-xauth-hack.conf\n$$1/m
debian/ssh.debathena: $(call debathena_check_conffiles,/etc/pam.d/ssh)
perl -0pe '(s/^\#[\t ]+(account[ \t]+required[ \t]+pam_access.so)/$$1/m or s/^(?=\@include[ \t]+common-account)/account required pam_access.so\n/m) and s/^(\@include[ \t]+common-session)/$$1\nsession\toptional\tpam_mktemp.so var=XAUTHORITY prefix=\/var\/run\/athena-sessions\/xauth/m or die' $< > $@
