Bug 4635 - PAM session data lacks several common attributes
Summary: PAM session data lacks several common attributes
Status: CLOSED WORKSFORME
Alias: None
Product: ThinLinc
Classification: Unclassified
Component: VSM Agent (show other bugs)
Version: trunk
Hardware: PC Unknown
: P2 Normal
Target Milestone: 4.15.0
Assignee: Bugzilla mail exporter
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2013-05-06 12:44 CEST by Pierre Ossman
Modified: 2022-10-12 16:59 CEST (History)
2 users (show)

See Also:
Acceptance Criteria:


Attachments

Description Pierre Ossman cendio 2013-05-06 12:44:53 CEST
PAM has a number of attributes that PAM modules can use to log/set useful metadata. E.g. pam_systemd looks at these:

PAM_SERVICE
PAM_XDISPLAY
PAM_TTY
PAM_RUSER
PAM_RHOST

Currently we only set PAM_TTY (and we set it to /dev/thinlinc, which doesn't match the thinlinc/# we give to wtmp). systemd seems to not prefer "fake" tty:s, and has heuristics like looking for ":", so maybe we should reevaluate what we put in there.
Comment 1 Karl Mikaelsson cendio 2014-06-03 14:05:34 CEST
Since we ran into bug 5166 I guess we've already implemented PAM_XDISPLAY.
Comment 4 Pierre Ossman cendio 2022-10-12 16:59:30 CEST
I'm uncertain if there is much to do here:

(In reply to Pierre Ossman from comment #0)
> PAM has a number of attributes that PAM modules can use to log/set useful
> metadata. E.g. pam_systemd looks at these:
> 
> PAM_SERVICE

I'm assuming this is set implicitly by PAM.

> PAM_XDISPLAY

Set since r28882 for bug 5104.

> PAM_TTY

Set since forever.

> PAM_RUSER

Not set. I am not certain how interesting it is.

> PAM_RHOST

Set since r27374 for bug 4644. Set to something bogus, though. See bug 5682.


So, I don't see anything valuable for us to set here. Closing until a practical use case pops up.

Note You need to log in before you can comment on or make changes to this bug.