Bug 139338 - updating KDM/GDM configuration after pam_winbind set for authentication
Summary: updating KDM/GDM configuration after pam_winbind set for authentication
Status: RESOLVED FIXED
Alias: None
Product: SUSE Linux 10.1
Classification: openSUSE
Component: YaST2 (show other bugs)
Version: Alpha 4
Hardware: Other Other
: P5 - None : Normal (vote)
Target Milestone: ---
Assignee: Stephan Kulow
QA Contact: Klaus Kämpf
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2005-12-15 12:05 UTC by Jiří Suchomel
Modified: 2006-03-01 08:11 UTC (History)
4 users (show)

See Also:
Found By: Other
Services Priority:
Business Priority:
Blocker: ---
Marketing QA Status: ---
IT Deployment: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Jiří Suchomel 2005-12-15 12:05:16 UTC
After yast2-samba-client sets the authentication (not sure if only in case of Active Directory or general for pam_winbind), KDM/GDM config needs to be updated to reflect this situation (to be able to show the winbind greeter).

The implementation must be done in yast2-samba-client, but I don't know what is necessary to do.
Comment 1 Jiří Suchomel 2005-12-15 12:11:24 UTC
(adding GNOME: Ralf says it is not available for GDM - Stanislav, do you want to do something about it?)
Comment 2 Stephan Kulow 2005-12-15 12:57:00 UTC
in any case: yast2 will have to change /etc/sysconfig/displaymanager and SuSEconfig will write the kdmrc. Not sure if something like setting KDM_GREETER to winbind (or empty if default) is enough for this.
Comment 3 Jiří Suchomel 2005-12-15 13:05:52 UTC
well, so what should yast write there?
Comment 4 Stephan Kulow 2005-12-15 13:09:54 UTC
can't tell you right now. Ask Ralf I guess
Comment 5 Stanislav Brabec 2005-12-16 15:50:24 UTC
AFAIK, GDM has no winbind domain selection in their greeters.

There are two levels for modifying gdm behavior:

- Show message and ask for domain as an additional question in PAM (text-only dialog, could work in console login).

- Change greeter in /etc/opt/gnome/gdm/gdm.conf (variables Greeter and RemoteGreeter).

If you are able to test, whether your greeter communicates with gdm, I can update greeter from sysconfig.

But in general it's bad to use KDM_GREETER - if you have both GNOME and KDE backends, it should be possible to select different one for kdm and different one for gdm.

GDM_GREETER
KDM_GREETER
GREETER # fallback, if XXX_GREETER is not set.
# If none is set, use default greeter from the package.
Comment 6 Ralf Haferkamp 2005-12-20 10:58:44 UTC
For KDM the follwing adjustments would have to be made to kdmrc if 
(KDM_)GREETER == winbind:

1. Set PluginsLogin and PluginsShutdown to windbind
2. If feature #300371 is not going to be ready for NLD10 add winbind.Domains=<domain> to the PluginOptions key
3. If feature #300372 add winbind.Separator=\ (or whatever the current separator is to the PluginOptions key.
4. If the winbind greeter can't be integrated into the current KDM theme (Feature #300373) some other adjustments might be needed (e.g. color, background, ...)


Comment 7 Jiří Suchomel 2005-12-20 11:43:37 UTC
This looks like yast2 module has to do only one thing: write "winbind" value to KDM_GREETER in /etc/sysconfig/displaymanager and run SuSEconfig. The rest should be done by SuSEconfig script for kdm.

Stephan, please add a desctiption for KDM_GREETER to /etc/sysconfig/displaymanager and take care of the rest of settings.
Comment 8 Stephan Kulow 2006-01-09 17:33:28 UTC
I decided to go a bit less kdm specific. Please add a "yes" there for winbind, the rest will be done in SuSEconfig

## Type:        yesno
## Default:     no
#
# Display a combobox for AD domains
#
DISPLAYMANAGER_AD_INTEGRATION=""
Comment 9 Jiří Suchomel 2006-01-10 07:53:18 UTC
Done.

Assuming only KDM can currently handle this, I run kdm3 SuSEconfig module after saving /etc/sysconfig/displaymanager.
Let me know when  GDM gets ready, so I can enhance yast behaviour.
Comment 10 Stanislav Brabec 2006-01-10 12:03:21 UTC
Reopening for GDM.
Comment 11 Jiří Suchomel 2006-01-10 12:12:24 UTC
OK, now YaST calls also "gdm" SuSEconfig module :-).
But I think GDM still is not able to show the greeter -> sbrabec.
Comment 12 Stanislav Brabec 2006-01-10 12:24:01 UTC
Setting to NEEDINFO:

I don't have any experience with AD and cannot test.

Could you try to edit /etc/opt/gnome/gdm/gdm.conf, change greeter/remote greeter there and let me know, whether it works with gdm?

If it does not work, we need a different solution (e. g. PAM module or so).
Comment 13 Stephan Kulow 2006-01-10 12:51:42 UTC
I don't know
Comment 14 JP Rosevear 2006-01-10 16:43:55 UTC
HPJ, what is the setting for gdm?
Comment 15 Hans Petter Jansson 2006-01-10 18:44:07 UTC
In gdm.conf: Set the key "ShowDomain" in section "greeter" to "true". Set it back to "false" or  comment it out to hide the domain selector. The latest gdm patch adds this option to gdm.conf, commented out.

[greeter]
ShowDomain=true
Comment 16 Hans Petter Jansson 2006-01-10 18:45:13 UTC
Note that the GDM theme must support domain selection. I have not yet committed changes to the NLD GDM theme.
Comment 17 Hans Petter Jansson 2006-01-17 16:02:49 UTC
The prerequisite changes for GDM and its theme are in autobuild since yesterday.

sbrabec: See above messages from me on how to update GDM configuration.
Comment 18 Stanislav Brabec 2006-02-06 15:06:18 UTC
DISPLAYMANAGER_AD_INTEGRATION implemented to SuSEconfig.gdm.

To Stephan Kulow: Please change default to "no". Empty string is not allowed for yesno and user of YaST sysconfig editor cannot continue here without value change.

## Type:        yesno
## Default:     no
#
# Display a combobox for AD domains
#
DISPLAYMANAGER_AD_INTEGRATION=""
Comment 19 Stanislav Brabec 2006-02-28 17:54:42 UTC
Reassigning. The fix for bug from comment #18 is also included in proposed patches in bug 148468.
Comment 20 Stephan Kulow 2006-03-01 08:11:24 UTC
done that