usertags 568577 + fetons-linux.ch-authentication
thanks

Hi there!

First of all: Steve, any news on this bug?

On Wed, 22 May 2013 09:50:03 +0200, Petter Reinholdtsen wrote:
> [Luca Capello 2011-01-07]
>> I thought about that as well, but why would you prefer that (a single
>> package for a 7k module...) to preseeding, as you suggested in your
>> first post?
>
> Preseeding only work when the package is installed.  And I would like to
> be able to enable pam_mkhomedir by just installing the set of packages
> needed for the task/profile I want to set up on the machine, also after
> it is already installed.

It seems my understanding of how debconf-set-selections works was wrong.
I was expecting that setting a value with it will result in such a value
being kept at the next dpkg-reconfigure run, which is not the case in
the following example:

  [/usr/share/pam-configs/mkhomedir with 'Default: no', otherwise as in
    <https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=568577#15>]
  # echo 'libpam-runtime libpam-runtime/profiles multiselect unix, ldap, 
mkhomedir' | debconf-set-selections
  # dpkg-reconfigure -phigh libpam-runtime
  [or DEBIAN_FRONTEND=noninteractive dpkg-reconfigure libpam-runtime]
  # debconf-show libpam-runtime | grep profiles:
  * libpam-runtime/profiles: unix, ldap

Am I missing something?

>> =====
>> luca@gismo:~$ debconf-show libpam-runtime | grep profiles
>> debconf: DbDriver "passwords" warning: could not open \
>>  /var/cache/debconf/passwords.dat: Permission denied
>>   libpam-runtime/no_profiles_chosen:
>> * libpam-runtime/profiles: unix, ldap, smbpasswd-migrate, mkhomedir
>> luca@gismo:~$ 
>> =====
>
> I believe these preseeding values do not really work when installing
> 1500 packages in one tasksel run, where some of them are PAM modules,
> because not all of them will be installed and configured when
> pam-auth-update uses the preseed value, thus the machine might end up
> with the wrong setup, depending on installation order for the packages.

Which IMHO means that we need a way to add *consecutive* values to
libpam-runtime/profiles, not split PAM modules into small packages.

Thx, bye,
Gismo / Luca

Attachment: signature.asc
Description: PGP signature

Reply via email to