Package: libpam-mount
Version: 0.18-6

When a user without a password tries to log in with a libpam-mount
volume, the user is prompted to reenter his password. If pam_mount is
specified as required (e.g. for a home directory), login fails
altogether. This is unhelpful in the case, for instance, where one has a
passwordless "guest" account whose home should be mounted and unmounted
via tmpfs.

The possible fixes would seem to be assuming null passwords mean the
empty string, or else adding a "nullok" option to the module. I'm not
sure, though, if the latter would make sense in pam-mount's context;
thoughts?

To reproduce this behavior: add a user with a blank password in
/etc/shadow; e.g.:
  guest::13740:0:99999:7:::
Then give that user a volume in /etc/security/pam_mount.conf:
  volume guest tmpfs - /tmpfs/guest /home/guest - - -
(Note that passing any mount options such as size through pam_mount.conf
seems to fail for me, but that's a separate issue I'm not yet sure
about). Try to log in as the user.


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to