tmzf5455/orange-yourdev-login
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat: disable PAM password feature for sss module

Browse Source 
Properties 'Password:' and 'Password-Initial:' are intentionally removed
from /usr/share/pam-configs/yourdev because changing a remote password
from the host using standard commands does not work in the Orange
environment : it changes the password in the Active Directory backend,
but not in the Gassi backend (they are not synchronized), and you end
up with two active passwords: the new one for kinit, IMAP, SMTP, SMB,
etc. and the old one for all websites from MonSI ...

With this configuration, you must use first the 'mot de passe attitude'
website to change your AD/Gassi password, and then the command `passwd`
to synchronize your local password.
This commit is contained in:
Michel Decima
2021-10-22 16:33:52 +02:00
parent fc01240154
commit f86e743798
1 changed files with 6 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
usr/share/pam-configs/yourdev
View File

@@ -16,8 +16,9 @@ Session-Type: Additional
Session-Interactive-Only: yes
Session:
optional pam_sss.so
Password-Type: Primary
Password:
sufficient pam_sss.so use_authtok
Password-Initial:
sufficient pam_sss.so
# properties 'Password:' and 'Password-Initial:' intentionally removed
# here because changing a remote password from the host using standard
# commands does not work in the Orange environment. You must use first
# the 'mot de passe attitude' website to change your AD/Gassi password,
# and then the command `passwd` to synchronize your local password.