I'm not sure we need to mind the smartcard PIN/Kerberos passwords to switch 
users.
Hmm.., I don't know how to change the string from "Password:" to "Smartcard 
PIN" with su command however if we could do it, I think C locale also would be 
hanged.
gksu is the wrapper to ask passwords with GUI to use admin tools or for roles.
gksu has the different logics between 'su' and 'sudo' and this patch is applied 
to 'su' only so I assume this case is 'su' only.

Alan Coopersmith wrote:
> So if su outputs a prompt for "Smartcard PIN" instead of password,
> would it also hang?   What if it asks for "Kerberos password" as well
> as normal password?
> 
> The point is you can't assume su prompts, no matter what the locale is.
> 
>     -Alan Coopersmith-           alan.coopersmith at sun.com
>      Sun Microsystems, Inc. - X Window System Engineering
> 
> Takao Fujiwara - Tokyo S/W Center wrote:
> 
>> I mean fget(3C) will never come back because "su" command has no 
>> outputs after the localized string "Password:" is just ignored.
>>
>>    while ( 1 )
>>    {
>>      bzero(buffer, 255);
>>      r = fgets (buffer, 255, infile);
>> ...
>>
>>      parse_embedded_su_output (context, buffer);
>>
>>      switch (context->msg_type) {
>>
>>        case ES_PASSWORD:
>>
>>
>> Alan Coopersmith wrote:
>>
>>> Takao Fujiwara - Tokyo S/W Center wrote:
>>>
>>>> I'm updating libgksu1.2-04-rbac-support.diff.
>>>> gksu tries to parse the string "Password:" but "Password:" is 
>>>> localized on locale then gksu hangs up by itself.
>>>> The patch means "su" command is always run on C locale.
>>>
>>>
>>>
>>> And what happens when su prompts for something other than "Password:"?
>>>
>>
>>
> 
> 



Reply via email to