On Monday 19 December 2005 15:55, C. Gatzemeier wrote:
> Profiles are not active upon logins like ssh -X since the
> desktop-profiles script is an xsession.d script.

> If desktop-profiles could be activated with a PAM module the behaviour
> could be the same regardless how the user entered the system.
> The problem came to my attention when a user starting kmail over ssh -X
> lost his settings aferwards. The loss of data is a bug in kmail, but it
> hinted to the missing profiles.

Note that a similar problem is activer for the gnupg-agent package whose 
Xsession.d-script also does some setup used by kmail (when using 
gpg-signing in any case), and possibly other packages adding Xsession.d 
scripts.

Note also that sshd_config(5) tels us that:
- sshd only uses PAM when UsePAM is set to yes
- that setting defaults to 'no'

=> creating a PAM-module doesn't seam like a real solution

Looking at sshd(8) I see that there's /etc/ssh/sshrc to be used 
formachine-specific global login-time initializations.

=> at this point I'm thinking we should convince the ssh maintainers to add 
a mechanism similar to Xsession.d/ that could be used by desktop-profiles, 
gnupg-agent and similar packages.
-- 
mvg, Bart Cornelise  

Attachment: pgpJujVDaVcar.pgp
Description: PGP signature

Reply via email to