From cgpera@cpinfo.com.ar Mon Oct 2 14:00:03 2006 Return-Path: X-Original-To: gdm-list@gnome.org Delivered-To: gdm-list@gnome.org Received: from localhost (localhost.localdomain [127.0.0.1]) by menubar.gnome.org (Postfix) with ESMTP id B67D83B000B for ; Mon, 2 Oct 2006 14:00:03 -0400 (EDT) Received: from menubar.gnome.org ([127.0.0.1]) by localhost (menubar.gnome.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 24870-02 for ; Mon, 2 Oct 2006 14:00:01 -0400 (EDT) Received: from ar6.toservers.com (host106.200.80.42.ifxnw.com.ar [200.80.42.106]) by menubar.gnome.org (Postfix) with ESMTP id 554AA3B0075 for ; Mon, 2 Oct 2006 14:00:00 -0400 (EDT) Received: from cpinfo.com.ar (ar6.toservers.com [200.80.42.106]) by ar6.toservers.com (Postfix) with SMTP id 0184A3E41E8 for ; Mon, 2 Oct 2006 14:59:51 -0300 (ART) MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----_=_NextPart_001_01C6E64C.A1750D86" Date: Mon, 2 Oct 2006 15:02:20 -0300 Content-class: urn:content-classes:message X-MimeOLE: Produced By Microsoft Exchange V6.5.7226.0 Message-ID: <8F6FFF8EF8C256449319556FD5D2CCDC09E658@server02.sistelab.net> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: xdmcp error in gdm Thread-Index: AcbmTOedyED0LtD4Q3CHnsa9CRgabg== From: "Claudio G. Pera" To: X-Virus-Scanned: by amavisd-new at gnome.org X-Spam-Status: No, score=-0.527 tagged_above=-999 required=2 tests=[BAYES_20=-0.74, FORGED_RCVD_HELO=0.135, HTML_MESSAGE=0.001, TW_GD=0.077] X-Spam-Score: -0.527 X-Spam-Level: X-Mailman-Approved-At: Mon, 02 Oct 2006 18:34:19 -0400 Cc: "Claudio G. Pera" Subject: [gdm-list] xdmcp error in gdm X-BeenThere: gdm-list@gnome.org X-Mailman-Version: 2.1.8 Precedence: list List-Id: GNOME Display Manager List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 02 Oct 2006 18:00:03 -0000 This is a multi-part message in MIME format. ------_=_NextPart_001_01C6E64C.A1750D86 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Hi,=20 =20 We are using gdm with centos 3.8 (x86_64) (the same is happen if we use = RHEL 3.8) and we implemented xdmcp to use with exceed remote displays. When we accessed in local way, that is we log in in gdmgreeter = everything is ok. We access to apps without problem. When we configured gdm to accept remote petitions from clients, the = problem is that we can log in remotely and do our jobs without problem, = but when log out from the remote system, in the console we can't do = anything else. I tried many things, like xclock or xterm and the error = is=20 =20 $ xterm Xterm: Xt error: can't open display:0.0 =20 If we reset the X server all is fine. =20 We can run the xterm program if we add the -display word after the = command =20 $ xterm -display localhost:0.0 =20 (opens the terminal in gnome desktop) =20 We tried to investigate the PreSession and PostSession dirs, but we = can't figure what is happening. =20 Can you help us? =20 Thanks in advance. =20 Saludos. Claudio G. Pera SISTELAB S.A. Tel.54-11-4635-3304 / 2425 M=F3vil 15-5564-0707 e-mail cpera@cpinfo.com.ar =20 =20 ------_=_NextPart_001_01C6E64C.A1750D86 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable

Hi, =

 

We are = using gdm with centos 3.8 (x86_64) (the same is happen if we use RHEL 3.8) and we implemented xdmcp to use with exceed remote = displays.

When we = accessed in local way, that is we log in in gdmgreeter everything is ok. We access = to apps without problem.

When we = configured gdm to accept remote petitions from clients, the problem is that we can = log in remotely and do our jobs without problem, but when log out from the = remote system, in the console we can’t do anything else. I tried many = things, like xclock or xterm and the error is

 

$ = xterm

Xterm: Xt = error: can’t open display:0.0

 

If we = reset the X server all is fine.

 

We can run = the xterm program if we add the –display word after the = command

 

$ xterm = –display localhost:0.0

 

(opens the = terminal in gnome desktop)

 

We tried = to investigate the PreSession and PostSession dirs, but we can’t = figure what is happening.

 

Can you = help us?

 

Thanks in = advance.

 

Saludos.

Claudio G. Pera
SISTELAB S.A.
Tel.54-11-4635-330= 4 / 2425
M=F3vil 15-5564-0707
e-mail cpera@cpinfo.com.ar

 

------_=_NextPart_001_01C6E64C.A1750D86-- From Brian.Cameron@Sun.COM Mon Oct 2 19:41:48 2006 Return-Path: X-Original-To: gdm-list@gnome.org Delivered-To: gdm-list@gnome.org Received: from localhost (localhost.localdomain [127.0.0.1]) by menubar.gnome.org (Postfix) with ESMTP id 8A6613B0077; Mon, 2 Oct 2006 19:41:48 -0400 (EDT) Received: from menubar.gnome.org ([127.0.0.1]) by localhost (menubar.gnome.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 08581-08; Mon, 2 Oct 2006 19:41:47 -0400 (EDT) Received: from brmea-mail-2.sun.com (brmea-mail-2.Sun.COM [192.18.98.43]) by menubar.gnome.org (Postfix) with ESMTP id 633AA3B006D; Mon, 2 Oct 2006 19:41:47 -0400 (EDT) Received: from fe-amer-01.sun.com ([192.18.108.175]) by brmea-mail-2.sun.com (8.13.6+Sun/8.12.9) with ESMTP id k92Nflkx020224; Mon, 2 Oct 2006 17:41:47 -0600 (MDT) Received: from conversion-daemon.mail-amer.sun.com by mail-amer.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) id <0J6J00B017X0XJ00@mail-amer.sun.com> (original mail from Brian.Cameron@Sun.COM); Mon, 02 Oct 2006 17:41:47 -0600 (MDT) Received: from [192.168.2.4] ([76.16.240.134]) by mail-amer.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) with ESMTPSA id <0J6J000V28HIZ3T2@mail-amer.sun.com>; Mon, 02 Oct 2006 17:41:46 -0600 (MDT) Date: Mon, 02 Oct 2006 18:41:43 -0500 From: Brian Cameron Sender: Brian.Cameron@Sun.COM To: gnome-announce-list@gnome.org, gdm-list@gnome.org Message-id: <4521A3B7.6020409@sun.com> MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT User-Agent: Mail/News 1.5.0.4 (X11/20060613) X-Virus-Scanned: by amavisd-new at gnome.org X-Spam-Status: No, score=-2.367 tagged_above=-999 required=2 tests=[BAYES_00=-2.599, TW_DM=0.077, TW_GD=0.077, TW_PM=0.077, UNPARSEABLE_RELAY=0.001] X-Spam-Score: -2.367 X-Spam-Level: Subject: [gdm-list] GDM2 2.16.1 (stable), the "Hyde Park" Release X-BeenThere: gdm-list@gnome.org X-Mailman-Version: 2.1.8 Precedence: list List-Id: GNOME Display Manager List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 02 Oct 2006 23:41:48 -0000 AOOH-GAH -------- (If you have no clue what GDM is, skip a few paragraphs down first) The 2.16.1 release is a stable release of GDM with the following new features: - Use g_markup_printf_escaped so gdmsetup better handles description strings that contains things similar to a tag like an email address. Fixes bug #357998. (Matthias Clasen) - Fix gdmsetup so that the window manager close button works as the Close button in the dialog (Matthias Clasen) - Fix for bug #352838, avoid crashing by moving call to get GDM_KEY_SYSTEM_MENU until after authentication check. (Frederic Crozat) - Add g_type_init() to gdmflexiserver since this is needed for -a (authentication) code to work. - Translation updates (Rahul Bhalerao, Runa Bhattacharjee, Alessio Frusciante, Priit Laes, David Lodge, \303\205smund Skj\303\246veland) Note: GDM2 was originally written by Martin K. Petersen . Much work has been done on GDM2 by George Lebl, and Brian Cameron currently shares maintainership duties with the Queen of England. Note2: If installing from the tarball do note that make install overwrites most of the setup files, all except gdm.conf. It will however save backups with the .orig extension first. #ifndef GDM_DISABLE_DEPRECATED Note3: Note3 has been depracated ... #endif /* GDM_DISABLE_DEPRECATED */ Downloading: ============ Online Documentation - http://www.gnome.org/projects/gdm/ Latest Stable - http://ftp.gnome.org/pub/GNOME/sources/gdm/2.16/ Latest Unstable - http://ftp.gnome.org/pub/GNOME/sources/gdm/2.17/ No RPM this time around BTW. Have fun. A spec file is included though, so you can try: rpmbuild -ta gdm-whatever.tar.gz Have fun, Brian From pnewman@mainframe.ca Wed Oct 4 17:27:22 2006 Return-Path: X-Original-To: gdm-list@gnome.org Delivered-To: gdm-list@gnome.org Received: from localhost (localhost.localdomain [127.0.0.1]) by menubar.gnome.org (Postfix) with ESMTP id 38AFD3B00DA for ; Wed, 4 Oct 2006 17:27:22 -0400 (EDT) Received: from menubar.gnome.org ([127.0.0.1]) by localhost (menubar.gnome.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 05859-08 for ; Wed, 4 Oct 2006 17:27:18 -0400 (EDT) Received: from mail.mainframe.ca (wale.mainframe.ca [209.17.131.74]) by menubar.gnome.org (Postfix) with ESMTP id 1A7D93B000F for ; Wed, 4 Oct 2006 17:27:18 -0400 (EDT) Received: from h209-17-131-89.gtconnect.net ([209.17.131.89] helo=mail.mainframe.ca) by mail.mainframe.ca with esmtp (Exim 4.63 (FreeBSD)) (envelope-from ) id 1GVEGn-000DoN-KZ for gdm-list@gnome.org; Wed, 04 Oct 2006 14:27:13 -0700 Received: from [172.16.139.185] by mail.mainframe.ca with esmtp (Exim 4.63 (FreeBSD)) (envelope-from ) id 1GVEDt-000PbF-V3 for gdm-list@gnome.org; Wed, 04 Oct 2006 14:24:14 -0700 Message-ID: <4524272C.3070700@mainframe.ca> Date: Wed, 04 Oct 2006 14:27:08 -0700 From: Paul Newman Organization: Mainframe Entertainment Inc. User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.7) Gecko/20050414 X-Accept-Language: en-us, en MIME-Version: 1.0 To: gdm-list@gnome.org Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit X-Virus-Scanned: by amavisd-new at gnome.org X-Spam-Status: No, score=0.213 tagged_above=-999 required=2 tests=[BAYES_50=0.001, FORGED_RCVD_HELO=0.135, TW_GD=0.077] X-Spam-Score: 0.213 X-Spam-Level: X-Mailman-Approved-At: Thu, 05 Oct 2006 19:26:53 -0400 Subject: [gdm-list] who shuts down monitor X-BeenThere: gdm-list@gnome.org X-Mailman-Version: 2.1.8 Precedence: list List-Id: GNOME Display Manager List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 04 Oct 2006 21:27:22 -0000 Hi. I've searched the mailing lists and documentation pages and have found nothing on configuring the screen saver behavior in gdm when idling on the graphical login screen. It appears that rather than just blanking the screen, the idle login screen powers down the screen. How do I change this behavior so that the screen blanks instead of powering down. thanks, p From Brian.Cameron@Sun.COM Thu Oct 5 21:07:44 2006 Return-Path: X-Original-To: gdm-list@gnome.org Delivered-To: gdm-list@gnome.org Received: from localhost (localhost.localdomain [127.0.0.1]) by menubar.gnome.org (Postfix) with ESMTP id 06ED03B0008 for ; Thu, 5 Oct 2006 21:07:44 -0400 (EDT) Received: from menubar.gnome.org ([127.0.0.1]) by localhost (menubar.gnome.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 12785-06 for ; Thu, 5 Oct 2006 21:07:41 -0400 (EDT) Received: from brmea-mail-2.sun.com (brmea-mail-2.Sun.COM [192.18.98.43]) by menubar.gnome.org (Postfix) with ESMTP id A222A3B0012 for ; Thu, 5 Oct 2006 21:07:40 -0400 (EDT) Received: from fe-amer-10.sun.com ([192.18.108.184]) by brmea-mail-2.sun.com (8.13.6+Sun/8.12.9) with ESMTP id k9617dZV021531 for ; Thu, 5 Oct 2006 19:07:40 -0600 (MDT) Received: from conversion-daemon.mail-amer.sun.com by mail-amer.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) id <0J6O00A01WGQ4F00@mail-amer.sun.com> (original mail from Brian.Cameron@Sun.COM) for gdm-list@gnome.org; Thu, 05 Oct 2006 19:07:39 -0600 (MDT) Received: from [129.150.12.230] by mail-amer.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) with ESMTPSA id <0J6O00I8NWGP1W8O@mail-amer.sun.com>; Thu, 05 Oct 2006 19:07:39 -0600 (MDT) Date: Thu, 05 Oct 2006 20:07:39 -0500 From: Brian Cameron In-reply-to: <4524272C.3070700@mainframe.ca> Sender: Brian.Cameron@Sun.COM To: Paul Newman Message-id: <4525AC5B.1010801@sun.com> MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT References: <4524272C.3070700@mainframe.ca> User-Agent: Mail/News 1.5.0.4 (X11/20060613) X-Virus-Scanned: by amavisd-new at gnome.org X-Spam-Status: No, score=-2.526 tagged_above=-999 required=2 tests=[AWL=-0.005, BAYES_00=-2.599, TW_GD=0.077, UNPARSEABLE_RELAY=0.001] X-Spam-Score: -2.526 X-Spam-Level: X-Mailman-Approved-At: Thu, 05 Oct 2006 21:10:44 -0400 Subject: Re: [gdm-list] who shuts down monitor X-BeenThere: gdm-list@gnome.org X-Mailman-Version: 2.1.8 Precedence: list List-Id: GNOME Display Manager List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 06 Oct 2006 01:07:44 -0000 Paul: This can be managed in a few ways. Some systems support the ability to turn this feature on at a lower level than GDM. This is probably the best way. To do it with GDM, you can use BackgroundProgram configuration key. Note that running programs from GDM can compromise security. If, for example, if the program you choose to run can be compromised. It is recommended to run a launcher program that causes the program to be run with lowest privilege (such as the "gdm" user). There are docs in the /usr/share/gdm/defaults.conf for this key, and in the GDM docs. Let me know if you need extra help setting this up. http://www.gnome.org/projects/gdm/docs/2.15/configuration.html Brian > I've searched the mailing lists and documentation pages and have found > nothing on configuring the screen saver behavior in gdm when idling on > the graphical login screen. > > It appears that rather than just blanking the screen, the idle login > screen powers down the screen. How do I change this behavior so that the > screen blanks instead of powering down. > > thanks, > > p > > _______________________________________________ > gdm-list mailing list > gdm-list@gnome.org > http://mail.gnome.org/mailman/listinfo/gdm-list From plouc2ploum@googlemail.com Mon Oct 9 11:10:28 2006 Return-Path: X-Original-To: gdm-list@gnome.org Delivered-To: gdm-list@gnome.org Received: from localhost (localhost.localdomain [127.0.0.1]) by menubar.gnome.org (Postfix) with ESMTP id A3B3A3B0076 for ; Mon, 9 Oct 2006 11:10:24 -0400 (EDT) Received: from menubar.gnome.org ([127.0.0.1]) by localhost (menubar.gnome.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 32558-09 for ; Mon, 9 Oct 2006 11:10:22 -0400 (EDT) Received: from ug-out-1314.google.com (ug-out-1314.google.com [66.249.92.169]) by menubar.gnome.org (Postfix) with ESMTP id DE2293B00E3 for ; Mon, 9 Oct 2006 11:10:18 -0400 (EDT) Received: by ug-out-1314.google.com with SMTP id 74so652183ugb for ; Mon, 09 Oct 2006 08:10:18 -0700 (PDT) Received: by 10.78.178.5 with SMTP id a5mr5435684huf; Mon, 09 Oct 2006 08:10:17 -0700 (PDT) Received: by 10.78.197.9 with HTTP; Mon, 9 Oct 2006 08:10:17 -0700 (PDT) Message-ID: <85059290610090810n99de82ap54af9a75e0a77dcb@mail.gmail.com> Date: Mon, 9 Oct 2006 16:10:17 +0100 From: "Ste Phane" To: gdm-list@gnome.org MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_Part_51960_11354794.1160406617712" X-Virus-Scanned: by amavisd-new at gnome.org X-Spam-Status: No, score=-2.412 tagged_above=-999 required=2 tests=[AWL=0.187, BAYES_00=-2.599, HTML_MESSAGE=0.001, SPF_PASS=-0.001] X-Spam-Score: -2.412 X-Spam-Level: X-Mailman-Approved-At: Mon, 09 Oct 2006 11:26:50 -0400 Subject: [gdm-list] letters appear as squares X-BeenThere: gdm-list@gnome.org X-Mailman-Version: 2.1.8 Precedence: list List-Id: GNOME Display Manager List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 09 Oct 2006 15:10:28 -0000 ------=_Part_51960_11354794.1160406617712 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline Hi I recently made an upgrade on my debian box. Since then all the letters from gnome appear as rectangles, as shown on the screenshot on the webpage http://photos1.blogger.com/blogger/5251/3982/1600/squares.jpg I remember that at one point in the upgrade I've been asked if I wanted to replace a config file about logger or debconf or something else, I haven't written down what it was... Could someone show me how to correct that problem? Thanks in advance Steph ------=_Part_51960_11354794.1160406617712 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Content-Disposition: inline Hi

I recently made an upgrade on my debian box. Since then all the letters from gnome appear as rectangles, as shown on the screenshot on the webpage  http://photos1.blogger.com/blogger/5251/3982/1600/squares.jpg
I remember that at one point in the upgrade I've been asked if I wanted to replace a config file about logger or debconf or something else, I haven't written down what it was...

Could someone show me how to correct that problem?
Thanks in advance

Steph ------=_Part_51960_11354794.1160406617712-- From plouc2ploum@googlemail.com Mon Oct 9 16:07:25 2006 Return-Path: X-Original-To: gdm-list@gnome.org Delivered-To: gdm-list@gnome.org Received: from localhost (localhost.localdomain [127.0.0.1]) by menubar.gnome.org (Postfix) with ESMTP id AC64A3B00AC for ; Mon, 9 Oct 2006 16:07:25 -0400 (EDT) Received: from menubar.gnome.org ([127.0.0.1]) by localhost (menubar.gnome.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 16244-08 for ; Mon, 9 Oct 2006 16:07:24 -0400 (EDT) Received: from ug-out-1314.google.com (ug-out-1314.google.com [66.249.92.173]) by menubar.gnome.org (Postfix) with ESMTP id CB1463B00C2 for ; Mon, 9 Oct 2006 16:07:23 -0400 (EDT) Received: by ug-out-1314.google.com with SMTP id 74so705589ugb for ; Mon, 09 Oct 2006 13:07:21 -0700 (PDT) Received: by 10.78.149.13 with SMTP id w13mr145348hud; Mon, 09 Oct 2006 13:07:20 -0700 (PDT) Received: by 10.78.197.9 with HTTP; Mon, 9 Oct 2006 13:07:20 -0700 (PDT) Message-ID: <85059290610091307m1a96e645vedc949cc3a3d6fd@mail.gmail.com> Date: Mon, 9 Oct 2006 21:07:20 +0100 From: "Ste Phane" To: gdm-list@gnome.org In-Reply-To: MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_Part_54784_29758677.1160424440560" References: X-Virus-Scanned: by amavisd-new at gnome.org X-Spam-Status: No, score=-2.109 tagged_above=-999 required=2 tests=[AWL=-0.160, BAYES_00=-2.599, HTML_40_50=0.496, HTML_MESSAGE=0.001, SPF_PASS=-0.001, TW_GD=0.077, TW_XF=0.077] X-Spam-Score: -2.109 X-Spam-Level: Subject: Re: [gdm-list] gdm-list Digest, Vol 15, Issue 3 X-BeenThere: gdm-list@gnome.org X-Mailman-Version: 2.1.8 Precedence: list List-Id: GNOME Display Manager List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 09 Oct 2006 20:07:25 -0000 ------=_Part_54784_29758677.1160424440560 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline Hello, I have installed xfce4 and it has solved my problem of characters that were showing as squares. On 10/9/06, gdm-list-request@gnome.org wrote: > > Send gdm-list mailing list submissions to > gdm-list@gnome.org > > To subscribe or unsubscribe via the World Wide Web, visit > http://mail.gnome.org/mailman/listinfo/gdm-list > or, via email, send a message with subject or body 'help' to > gdm-list-request@gnome.org > > You can reach the person managing the list at > gdm-list-owner@gnome.org > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of gdm-list digest..." > > > Today's Topics: > > 1. letters appear as squares (Ste Phane) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Mon, 9 Oct 2006 16:10:17 +0100 > From: "Ste Phane" > Subject: [gdm-list] letters appear as squares > To: gdm-list@gnome.org > Message-ID: > <85059290610090810n99de82ap54af9a75e0a77dcb@mail.gmail.com> > Content-Type: text/plain; charset="iso-8859-1" > > Hi > > I recently made an upgrade on my debian box. Since then all the letters > from > gnome appear as rectangles, as shown on the screenshot on the webpage > http://photos1.blogger.com/blogger/5251/3982/1600/squares.jpg > I remember that at one point in the upgrade I've been asked if I wanted to > replace a config file about logger or debconf or something else, I haven't > written down what it was... > > Could someone show me how to correct that problem? > Thanks in advance > > Steph > -------------- next part -------------- > An HTML attachment was scrubbed... > URL: /archives/gdm-list/attachments/20061009/bef2437c/attachment.htm > > ------------------------------ > > _______________________________________________ > gdm-list mailing list > gdm-list@gnome.org > http://mail.gnome.org/mailman/listinfo/gdm-list > > > End of gdm-list Digest, Vol 15, Issue 3 > *************************************** > ------=_Part_54784_29758677.1160424440560 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Content-Disposition: inline Hello, I have installed xfce4 and it has solved my problem of characters that were showing as squares.

On 10/9/06, gdm-list-request@gnome.org <gdm-list-request@gnome.org> wrote:
Send gdm-list mailing list submissions to
        gdm-list@gnome.org

To subscribe or unsubscribe via the World Wide Web, visit
         http://mail.gnome.org/mailman/listinfo/gdm-list
or, via email, send a message with subject or body 'help' to
        gdm-list-request@gnome.org

You can reach the person managing the list at
        gdm-list-owner@gnome.org

When replying, please edit your Subject line so it is more specific
than "Re: Contents of gdm-list digest..."


Today's Topics:

   1.  letters appear as squares (Ste Phane)


----------------------------------------------------------------------

Message: 1
Date: Mon, 9 Oct 2006 16:10:17 +0100
From: "Ste Phane" < plouc2ploum@googlemail.com>
Subject: [gdm-list] letters appear as squares
To: gdm-list@gnome.org
Message-ID:
        < 85059290610090810n99de82ap54af9a75e0a77dcb@mail.gmail.com>
Content-Type: text/plain; charset="iso-8859-1"

Hi

I recently made an upgrade on my debian box. Since then all the letters from
gnome appear as rectangles, as shown on the screenshot on the webpage
http://photos1.blogger.com/blogger/5251/3982/1600/squares.jpg
I remember that at one point in the upgrade I've been asked if I wanted to
replace a config file about logger or debconf or something else, I haven't
written down what it was...

Could someone show me how to correct that problem?
Thanks in advance

Steph
-------------- next part --------------
An HTML attachment was scrubbed...
URL: /archives/gdm-list/attachments/20061009/bef2437c/attachment.htm

------------------------------

_______________________________________________
gdm-list mailing list
gdm-list@gnome.org
http://mail.gnome.org/mailman/listinfo/gdm-list


End of gdm-list Digest, Vol 15, Issue 3
***************************************

------=_Part_54784_29758677.1160424440560-- From corey.burger@gmail.com Tue Oct 10 02:37:39 2006 Return-Path: X-Original-To: gdm-list@gnome.org Delivered-To: gdm-list@gnome.org Received: from localhost (localhost.localdomain [127.0.0.1]) by menubar.gnome.org (Postfix) with ESMTP id 6CCBF3B00B9 for ; Tue, 10 Oct 2006 02:37:39 -0400 (EDT) Received: from menubar.gnome.org ([127.0.0.1]) by localhost (menubar.gnome.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 09780-05 for ; Tue, 10 Oct 2006 02:37:38 -0400 (EDT) Received: from nf-out-0910.google.com (nf-out-0910.google.com [64.233.182.189]) by menubar.gnome.org (Postfix) with ESMTP id 367A93B000B for ; Tue, 10 Oct 2006 02:37:38 -0400 (EDT) Received: by nf-out-0910.google.com with SMTP id n15so198275nfc for ; Mon, 09 Oct 2006 23:37:37 -0700 (PDT) Received: by 10.82.142.9 with SMTP id p9mr743190bud; Mon, 09 Oct 2006 23:37:37 -0700 (PDT) Received: by 10.82.119.10 with HTTP; Mon, 9 Oct 2006 23:37:37 -0700 (PDT) Message-ID: <348bd6da0610092337j5e6d6a52hc15ae7bc12c449ab@mail.gmail.com> Date: Tue, 10 Oct 2006 02:37:37 -0400 From: "Corey Burger" To: gdm-list@gnome.org MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline X-Virus-Scanned: by amavisd-new at gnome.org X-Spam-Status: No, score=-2.383 tagged_above=-999 required=2 tests=[AWL=-0.060, BAYES_00=-2.599, DNS_FROM_RFC_ABUSE=0.2, SPF_PASS=-0.001, TW_GD=0.077] X-Spam-Score: -2.383 X-Spam-Level: Subject: [gdm-list] Notes from the hallway bof in Boston X-BeenThere: gdm-list@gnome.org X-Mailman-Version: 2.1.8 Precedence: list List-Id: GNOME Display Manager List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 10 Oct 2006 06:37:39 -0000 Hey all, Brian and I had a good discussion about some enhancements to GDM in the near future. Here are some things we talked about: 1. Using GDM to replace the splash screen. We talked more about how to do this. Ryan Lortie has been worked on a patch for this. You can see the notes and Ryan's patch at http://bugzilla.gnome.org/show_bug.cgi?id=355190 2. Extend the GDM xml to understand what parts of the UI are the background and which are the above it. This is needed for the above patch. Jimmac has been working on a new theme for Novell based on this stuff. 3. Locking down via pessulus. Notes at: http://bugzilla.gnome.org/show_bug.cgi?id=361000 Discussion of what sort of lockdown is needed on that bug 4. Change the language and session dialogs so that they can be either a drop down list or a combo box. http://bugzilla.gnome.org/show_bug.cgi?id=361069 5. GDM currently has code for a gdmlogin which is entirely seperate from the gdmgreeter (which most distro ship). The reason for this is because the greeter doesn't support screen magnifiers. If this is fixed, the gdmlogin code can go away. We also spoke about the ability to display arbitrary other things during the login process. The most likely case is to show the user some piece of text the user must view or agree to, such as an acceptable use policy or a legal notice. My thoughts are to show this via gdm, but another solution is to use zenity in the scripts that run before login. More discussion is needed to figure out how this interacts with the new gdm-past-login patch. Brian, did I miss anything? Corey From Brian.Cameron@Sun.COM Mon Oct 16 18:40:19 2006 Return-Path: X-Original-To: gdm-list@gnome.org Delivered-To: gdm-list@gnome.org Received: from localhost (localhost.localdomain [127.0.0.1]) by menubar.gnome.org (Postfix) with ESMTP id 56AAC3B006F; Mon, 16 Oct 2006 18:40:19 -0400 (EDT) Received: from menubar.gnome.org ([127.0.0.1]) by localhost (menubar.gnome.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 30647-10; Mon, 16 Oct 2006 18:40:16 -0400 (EDT) Received: from brmea-mail-3.sun.com (brmea-mail-3.Sun.COM [192.18.98.34]) by menubar.gnome.org (Postfix) with ESMTP id 5E83D3B000E; Mon, 16 Oct 2006 18:40:16 -0400 (EDT) Received: from fe-amer-04.sun.com ([192.18.108.178]) by brmea-mail-3.sun.com (8.13.6+Sun/8.12.9) with ESMTP id k9GMeFBL022726; Mon, 16 Oct 2006 16:40:15 -0600 (MDT) Received: from conversion-daemon.mail-amer.sun.com by mail-amer.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) id <0J79003011RGYN00@mail-amer.sun.com> (original mail from Brian.Cameron@Sun.COM); Mon, 16 Oct 2006 16:40:15 -0600 (MDT) Received: from [10.255.134.54] ([208.54.95.129]) by mail-amer.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) with ESMTPSA id <0J79007QU2Z2R7H6@mail-amer.sun.com>; Mon, 16 Oct 2006 16:40:15 -0600 (MDT) Date: Mon, 16 Oct 2006 17:40:16 -0500 From: Brian Cameron Sender: Brian.Cameron@Sun.COM To: gnome-announce-list@gnome.org Message-id: <45340A50.2080801@sun.com> MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT User-Agent: Mail/News 1.5.0.4 (X11/20060613) X-Virus-Scanned: by amavisd-new at gnome.org X-Spam-Status: No, score=-1.454 tagged_above=-999 required=2 tests=[AWL=-0.645, BAYES_00=-2.599, RCVD_IN_BL_SPAMCOP_NET=1.558, TW_DM=0.077, TW_GD=0.077, TW_PM=0.077, UNPARSEABLE_RELAY=0.001] X-Spam-Score: -1.454 X-Spam-Level: Cc: gdm-list@gnome.org Subject: [gdm-list] GDM2 2.17.0 (unstable), the "Reach For The Stars" Release X-BeenThere: gdm-list@gnome.org X-Mailman-Version: 2.1.8 Precedence: list List-Id: GNOME Display Manager List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 16 Oct 2006 22:40:19 -0000 AOOH-GAH -------- (If you have no clue what gdm is, skip a few paragraphs down first) The 2.17.0 release is an unstable release of GDM with the following new features. - Now when GDM_ADD_MODULES is set, GDM will launch at-spi-registryd. (Ariel Rios) - New SupportAutomount option which, when turned on, changes the way that GDM accesses the user's $HOME/.dmrc file so that automounted $HOME directories can be configured to work even when the automounter is not started with the --ghost option. (Jerzy Borkowski) - Fix so that if timed login script returns an invalid user, timed login is not turned on. Fix for bug #340148. (Andrew - andrewz@springsrescuemission.org). - Fix for bug #352838, avoid crashing by moving call to get GDM_KEY_SYSTEM_MENU until after authentication check. (Frederic Crozat) - Use g_markup_printf_escaped so gdmsetup better handles description strings that contains things similar to a tag like an email address. Fixes bug #357998. (Matthias Clasen) - Fix gdmsetup so that the window manager close button works as the Close button in the dialog. (Matthias Clasen) - Add g_type_init() to gdmflexiserver since this is needed for -a (authentication) code to work. (Brian Cameron) - Set authdir to NULL after freeing to avoid accessing an invalid pointer. Fix for bug #359831. (Amnon Aaronsohn) - Memory leaks fixed. (Kjartan Maraas) - Translation updates (Abel Cheung, Yair Hershkovitz, Raphael Higino, Priit Laes, \303\205smund Skj\303\246veland, Ivar Smolin) Note: GDM2 was originally written by Martin K. Petersen . Much work has been done on GDM2 by George Lebl, and Brian Cameron currently shares maintainership duties with the Queen of England. Note2: If installing from the tarball do note that make install overwrites most of the setup files, all except gdm.conf. It will however save backups with the .orig extension first. #ifndef GDM_DISABLE_DEPRECATED Note3: Note3 has been depracated ... #endif /* GDM_DISABLE_DEPRECATED */ Downloading: ============ Online Documentation - http://www.gnome.org/projects/gdm/ Latest Stable - http://ftp.gnome.org/pub/GNOME/sources/gdm/2.16/ Latest Unstable - http://ftp.gnome.org/pub/GNOME/sources/gdm/2.17/ No RPM this time around BTW. Have fun. A spec file is included though, so you can try: rpmbuild -ta gdm-whatever.tar.gz Have fun, Brian From Geoff.Elgey@quest.com Tue Oct 17 00:11:53 2006 Return-Path: X-Original-To: gdm-list@gnome.org Delivered-To: gdm-list@gnome.org Received: from localhost (localhost.localdomain [127.0.0.1]) by menubar.gnome.org (Postfix) with ESMTP id 09FBF3B0014 for ; Tue, 17 Oct 2006 00:11:53 -0400 (EDT) Received: from menubar.gnome.org ([127.0.0.1]) by localhost (menubar.gnome.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 11919-08 for ; Tue, 17 Oct 2006 00:11:52 -0400 (EDT) Received: from irvbhxw03.quest.com (irvbhxw03.quest.com [12.106.87.70]) by menubar.gnome.org (Postfix) with ESMTP id D56BF3B000A for ; Tue, 17 Oct 2006 00:11:51 -0400 (EDT) Received: from melmbxw01.prod.quest.corp ([10.20.4.118]) by irvbhxw03.quest.com with Microsoft SMTPSVC(6.0.3790.1830); Mon, 16 Oct 2006 21:11:51 -0700 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Date: Tue, 17 Oct 2006 14:11:50 +1000 Message-ID: <0BAEFFA7AFADFD4497F50DD093687E07130420@melmbxw01.prod.quest.corp> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: GDM smartcard hack Thread-Index: Acbxol6i+BDwxTk1SR+YgGOQzkVeVQ== From: "Geoff Elgey" To: X-OriginalArrivalTime: 17 Oct 2006 04:11:51.0714 (UTC) FILETIME=[5F939020:01C6F1A2] X-Virus-Scanned: by amavisd-new at gnome.org X-Spam-Status: No, score=-2.58 tagged_above=-999 required=2 tests=[AWL=0.019, BAYES_00=-2.599] X-Spam-Score: -2.58 X-Spam-Level: Subject: [gdm-list] GDM smartcard hack X-BeenThere: gdm-list@gnome.org X-Mailman-Version: 2.1.8 Precedence: list List-Id: GNOME Display Manager List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 17 Oct 2006 04:11:53 -0000 G'day, A while back I asked if there was any smartcard support in GDM.=20 All I really want at this point is to write out a PAM prompt such as "Insert card or enter username", and have GDM recognize if a card has been inserted. At that point the PAM conversation would return with an empty username and the PAM application would check if a card is present, and get the username from the card, etc. I've got a hacked version of GDM that starts a thread (in the greeter process) when PAM_PROMPT is found. This thread monitors the card status and if a card status is "present" then it writes the special symbol STX to stdout. This is read by the slave process and returned via gdm_slave_greeter_ctl() function. The thread exits when either a card is found to be present or an actual username is obtained at the prompt.=20 For example, in daemon/verify-pam.c: switch (msg[replies]->msg_style) { case PAM_PROMPT_ECHO_ON: ... /* Start a thread that will recognize a token */ gdm_slave_greeter_ctl_no_ret(GDM_TOKEN, _("insert")); /* Get a username. Token thread may force this to return */ s =3D gdm_slave_greeter_ctl (GDM_PROMPT, m); /* Stop token thread */ gdm_slave_greeter_ctl_no_ret(GDM_TOKEN, _("stop")); =20 This "sort of" emulates entering an empty username at the prompt and seems to work, although I do worry about corrupting stdout (ie, user enters a name at the prompt and inserts a card at the same time). I've glossed over a lot of details, but it's quite a hack and I'm wondering if there is a better way of doing this than starting my own monitoring thread and writing directly to stdout. For example, is it better to push an event on the Gtk queue rather than writing directly to stdout? I haven't been following the GDM changes too closely, so maybe some kind of smartcard functionality or "start a user service on demand" functionality already exists. Any thoughts appreciated. -- Geoff From Brian.Cameron@Sun.COM Tue Oct 17 18:07:02 2006 Return-Path: X-Original-To: gdm-list@gnome.org Delivered-To: gdm-list@gnome.org Received: from localhost (localhost.localdomain [127.0.0.1]) by menubar.gnome.org (Postfix) with ESMTP id 5F99D3B00A0 for ; Tue, 17 Oct 2006 18:07:02 -0400 (EDT) Received: from menubar.gnome.org ([127.0.0.1]) by localhost (menubar.gnome.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 03298-07 for ; Tue, 17 Oct 2006 18:06:58 -0400 (EDT) Received: from brmea-mail-2.sun.com (brmea-mail-2.Sun.COM [192.18.98.43]) by menubar.gnome.org (Postfix) with ESMTP id 1375E3B00F7 for ; Tue, 17 Oct 2006 18:06:58 -0400 (EDT) Received: from fe-amer-03.sun.com ([192.18.108.177]) by brmea-mail-2.sun.com (8.13.6+Sun/8.12.9) with ESMTP id k9HM6vAR023419 for ; Tue, 17 Oct 2006 16:06:57 -0600 (MDT) Received: from conversion-daemon.mail-amer.sun.com by mail-amer.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) id <0J7A00701VUYUL00@mail-amer.sun.com> (original mail from Brian.Cameron@Sun.COM) for gdm-list@gnome.org; Tue, 17 Oct 2006 16:06:57 -0600 (MDT) Received: from [129.150.80.249] by mail-amer.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) with ESMTPSA id <0J7A00LRBW3KE9T5@mail-amer.sun.com>; Tue, 17 Oct 2006 16:06:57 -0600 (MDT) Date: Tue, 17 Oct 2006 17:06:58 -0500 From: Brian Cameron In-reply-to: <0BAEFFA7AFADFD4497F50DD093687E07130420@melmbxw01.prod.quest.corp> Sender: Brian.Cameron@Sun.COM To: Geoff Elgey Message-id: <45355402.8090906@sun.com> MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT References: <0BAEFFA7AFADFD4497F50DD093687E07130420@melmbxw01.prod.quest.corp> User-Agent: Mail/News 1.5.0.4 (X11/20060613) X-Virus-Scanned: by amavisd-new at gnome.org X-Spam-Status: No, score=-2.525 tagged_above=-999 required=2 tests=[AWL=-0.004, BAYES_00=-2.599, TW_DM=0.077, UNPARSEABLE_RELAY=0.001] X-Spam-Score: -2.525 X-Spam-Level: Cc: gdm-list@gnome.org Subject: Re: [gdm-list] GDM smartcard hack X-BeenThere: gdm-list@gnome.org X-Mailman-Version: 2.1.8 Precedence: list List-Id: GNOME Display Manager List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 17 Oct 2006 22:07:02 -0000 Geoff: > A while back I asked if there was any smartcard support in GDM. Since GDM supports PAM, it should be possible to define a PAM module that will work with a SmartCard without needing to modify GDM. There might be some corner cases where the GUI can be improved to work better with PAM in general when using custom PAM modules, but we'll explore such issues when we have specific examples to discuss. > All I really want at this point is to write out a PAM prompt such as > "Insert card or enter username", and have GDM recognize if a card has > been inserted. At that point the PAM conversation would return with an > empty username and the PAM application would check if a card is present, > and get the username from the card, etc. It might be possible to get this sort of thing to work with one PAM module, but probably better to have separate modules for keyboard entry and SmartCard. PAM isn't really designed for a single PAM module to handle multiple kinds of authentication. I'd make it work something like this... The default PAM module would be the one for keyboard entry and would provide the prompt you want that says "you can also insert a SmartCard". This PAM module (or a separate daemon or a GTK_MODULE loaded into the GDM daemon) should be listening for SmartCard insertion) and should shutdown and restart GDM with the new PamStack configuration setting. This would just mean modifying the GDM configuration file and telling GDM to update the setting via gdmflexiserver --command "UPDATE_CONFIG key". This PAM module should grab the username from the smartcard and tell GDM to ask for password. Likewise, upon SmartCard removal (or perhaps also after a timeout if the user doesn't enter password in a long time), then the GUI should be reset with the original PamStack. Note that PamStack can be specified in per-display configuration, so you can have different PamStack values for different displays. In a multi- display environment, this allows one user to be using SmartCard and another user to be entering via keyboard simultaneously. You can specify the display with the key when using UPDATE_CONFIG for per-display usage. It might be a bit nicer if GDM were enhanced to not actually restart, but tear down and rebuild the PAM stack on the fly. Would be faster and avoid flicker as GDM goes down and up. But this is just a UI improvement. > I've got a hacked version of GDM that starts a thread (in the greeter > process) when PAM_PROMPT is found. This thread monitors the card status > and if a card status is "present" then it writes the special symbol STX > to stdout. This is read by the slave process and returned via > gdm_slave_greeter_ctl() function. The thread exits when either a card is > found to be present or an actual username is obtained at the prompt. I don't think it is appropriate to hack the GDM GUI code with specific code like this. Each SmartCard implementation, fingerprint reader, eye scanner, or whatever probably wants their own logic. Not good to clutter up the code. I'd recommend putting the code listening for SmartCard insertion/removal in a separate daemon, the PAM module itself or a GTK_MODULE that you could load with the GDM daemon. > For example, in daemon/verify-pam.c: > > switch (msg[replies]->msg_style) { > case PAM_PROMPT_ECHO_ON: > ... > > /* Start a thread that will recognize a token */ > gdm_slave_greeter_ctl_no_ret(GDM_TOKEN, _("insert")); > > /* Get a username. Token thread may force this to return */ > s = gdm_slave_greeter_ctl (GDM_PROMPT, m); > > /* Stop token thread */ > gdm_slave_greeter_ctl_no_ret(GDM_TOKEN, _("stop")); > > > This "sort of" emulates entering an empty username at the prompt and > seems to work, although I do worry about corrupting stdout (ie, user > enters a name at the prompt and inserts a card at the same time). > > I've glossed over a lot of details, but it's quite a hack and I'm > wondering if there is a better way of doing this than starting my own > monitoring thread and writing directly to stdout. For example, is it > better to push an event on the Gtk queue rather than writing directly to > stdout? > > I haven't been following the GDM changes too closely, so maybe some kind > of smartcard functionality or "start a user service on demand" > functionality already exists. > > Any thoughts appreciated. I think that there are better ways to integrate with PAM/SmartCard support than hacking up the GDM code like you suggest. Hopefully this gives you some pointers about how to make it work. Brian From Geoff.Elgey@quest.com Tue Oct 17 19:19:18 2006 Return-Path: X-Original-To: gdm-list@gnome.org Delivered-To: gdm-list@gnome.org Received: from localhost (localhost.localdomain [127.0.0.1]) by menubar.gnome.org (Postfix) with ESMTP id 0103A3B00CE for ; Tue, 17 Oct 2006 19:19:18 -0400 (EDT) Received: from menubar.gnome.org ([127.0.0.1]) by localhost (menubar.gnome.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 07665-02 for ; Tue, 17 Oct 2006 19:19:14 -0400 (EDT) Received: from irvbhxw03.quest.com (irvbhxw03.quest.com [12.106.87.70]) by menubar.gnome.org (Postfix) with ESMTP id 6C25E3B009C for ; Tue, 17 Oct 2006 19:19:14 -0400 (EDT) Received: from melmbxw01.prod.quest.corp ([10.20.4.118]) by irvbhxw03.quest.com with Microsoft SMTPSVC(6.0.3790.1830); Tue, 17 Oct 2006 16:19:14 -0700 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Date: Wed, 18 Oct 2006 09:19:12 +1000 Message-ID: <0BAEFFA7AFADFD4497F50DD093687E07130421@melmbxw01.prod.quest.corp> In-Reply-To: <45355402.8090906@sun.com> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: [gdm-list] GDM smartcard hack Thread-Index: AcbyOJSqoOXmKGk+QAypj4GcZ6iFmAABS/1w From: "Geoff Elgey" To: X-OriginalArrivalTime: 17 Oct 2006 23:19:14.0096 (UTC) FILETIME=[A8D56B00:01C6F242] X-Virus-Scanned: by amavisd-new at gnome.org X-Spam-Status: No, score=-2.586 tagged_above=-999 required=2 tests=[AWL=0.013, BAYES_00=-2.599] X-Spam-Score: -2.586 X-Spam-Level: Cc: gdm-list@gnome.org Subject: Re: [gdm-list] GDM smartcard hack X-BeenThere: gdm-list@gnome.org X-Mailman-Version: 2.1.8 Precedence: list List-Id: GNOME Display Manager List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 17 Oct 2006 23:19:18 -0000 G'day, =20 Thanks for the reply.=20 > It might be possible to get this sort of thing to work with=20 > one PAM module, but probably better to have separate modules=20 > for keyboard entry and SmartCard. PAM isn't really designed=20 > for a single PAM module to handle multiple kinds of authentication. I did gloss over a lot of stuff in my original message. The PAM modules I have that handles smartcard handles two cases: smartcard authentication only, or smartcard authentication with fallback to the next module in the PAM stack (which is typically a password-based PAM module). A different prompt is used for each case. Not technically pure (in the sense that adding a fingerprint reader for example between the smartcard and password modules on the stack would be tricky), but sufficient for my purposes.=20 [As an aside, even the smartcard only case still presents a "Username:" prompt under GDM, at least with all the themes I have tried. Is it possible to have a UI that only displays a prompt field when a PIN is required? That is, after card insertion has been recognized?] > This PAM module (or a separate daemon or a GTK_MODULE loaded=20 > into the GDM daemon) should be listening for SmartCard=20 > insertion) and should shutdown and restart GDM with the new=20 > PamStack configuration setting. Interesting -- I need to learn more about GTK_MODULE, if it can be loaded in to the GDM daemon. Although shutdown and restart of GDM would be kinda ugly user experience, right? Blanking of the screen and bringing it all back up again? It would probably be easier to modify the PAM stack on the fly, and have GDM call pam_sm_authenticate() or even pam_start() again, although just what changes are made, and to which file, could prove tricky. Currently I have a GDM configuration file setting that specifies the location of a "PAM prompt service". If the setting exists, then the service (shared library) is loaded dynamically when a PAM_PROMPT_ECHO_ON or PAM_PROMPT_ECHO_OFF message is handled. This service is started just before the gdm_slave_greeter_ctl (GDM_PROMPT, m) call and terminated when that call returns (or perhaps it is better to add this login where GDM_PROMPT is handled). In my previous post I just called this "start smartcard thread", but really it is just a service that basically provides another way to get an input from the prompt -- in this case, card insertion is detected and returns an empty username. The PAM module knows what do if it gets an empty username and it detects a card. Actually, this could be extended to other mechanisms such as fingerprint-readers, etc -- anything that can be made to emulate a response to a PAM_PROMPT_ECHO_ON or PAM_PROMPT_ECHO_OFF message, really. But if there's a GTK module that can do something similar, then I'll look into it. BTW what do you mean by "restart GDM with the new PamStack configuration setting"? Does PamStack mean the actual PAM stack (ie, the content of /etc/pam.d/gdm) or are you referring to something within GDM? You mention updating the GDM configuration file so I'm guessing the latter? I'm using GDM 2.6.05 at the moment (since I am targetting what gets shipped with RHEL4) and I don't see any "PamStack" in the code. Apologies if I have misunderstood the reason why the GDM configuration file should change. -- Geoff From Brian.Cameron@Sun.COM Tue Oct 17 19:34:57 2006 Return-Path: X-Original-To: gdm-list@gnome.org Delivered-To: gdm-list@gnome.org Received: from localhost (localhost.localdomain [127.0.0.1]) by menubar.gnome.org (Postfix) with ESMTP id 9C9433B0071 for ; Tue, 17 Oct 2006 19:34:57 -0400 (EDT) Received: from menubar.gnome.org ([127.0.0.1]) by localhost (menubar.gnome.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 08379-04 for ; Tue, 17 Oct 2006 19:34:56 -0400 (EDT) Received: from brmea-mail-2.sun.com (brmea-mail-2.Sun.COM [192.18.98.43]) by menubar.gnome.org (Postfix) with ESMTP id 737703B0191 for ; Tue, 17 Oct 2006 19:34:56 -0400 (EDT) Received: from fe-amer-06.sun.com ([192.18.108.180]) by brmea-mail-2.sun.com (8.13.6+Sun/8.12.9) with ESMTP id k9HNYuVZ004768 for ; Tue, 17 Oct 2006 17:34:56 -0600 (MDT) Received: from conversion-daemon.mail-amer.sun.com by mail-amer.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) id <0J7A00J01Z9R7B00@mail-amer.sun.com> (original mail from Brian.Cameron@Sun.COM) for gdm-list@gnome.org; Tue, 17 Oct 2006 17:34:56 -0600 (MDT) Received: from [129.150.80.249] by mail-amer.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) with ESMTPSA id <0J7B001WC066Y6S3@mail-amer.sun.com>; Tue, 17 Oct 2006 17:34:56 -0600 (MDT) Date: Tue, 17 Oct 2006 18:34:56 -0500 From: Brian Cameron In-reply-to: <0BAEFFA7AFADFD4497F50DD093687E07130421@melmbxw01.prod.quest.corp> Sender: Brian.Cameron@Sun.COM To: Geoff Elgey Message-id: <453568A0.80305@sun.com> MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT References: <0BAEFFA7AFADFD4497F50DD093687E07130421@melmbxw01.prod.quest.corp> User-Agent: Mail/News 1.5.0.4 (X11/20060613) X-Virus-Scanned: by amavisd-new at gnome.org X-Spam-Status: No, score=-2.448 tagged_above=-999 required=2 tests=[AWL=-0.081, BAYES_00=-2.599, TW_DM=0.077, TW_GD=0.077, TW_GT=0.077, UNPARSEABLE_RELAY=0.001] X-Spam-Score: -2.448 X-Spam-Level: Cc: gdm-list@gnome.org Subject: Re: [gdm-list] GDM smartcard hack X-BeenThere: gdm-list@gnome.org X-Mailman-Version: 2.1.8 Precedence: list List-Id: GNOME Display Manager List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 17 Oct 2006 23:34:57 -0000 Geoff: > Thanks for the reply. > [As an aside, even the smartcard only case still presents a "Username:" > prompt under GDM, at least with all the themes I have tried. Is it > possible to have a UI that only displays a prompt field when a PIN is > required? That is, after card insertion has been recognized?] You probably need to hack the PAM module if you want a different label. It'd be gross to change the prompt in the GDM GUI code, I'd think. >> This PAM module (or a separate daemon or a GTK_MODULE loaded >> into the GDM daemon) should be listening for SmartCard >> insertion) and should shutdown and restart GDM with the new >> PamStack configuration setting. > > Interesting -- I need to learn more about GTK_MODULE, if it can be > loaded in to the GDM daemon. Actually gdm-binary doesn't use GTK_MODULE since it doesn't normally call gtk_main (unless it needs to pop up a GUI dialog after dropping down to the gdm user). However, implementing a module structure that works like GTK_MODULE for GDM would be the way to do this, I think. Refer to the GTK+ documentation to learn about GTK_MODULE and how it is implemented. Note that AddGtkModules and GtkModulesList in the GDM configuration code only applies to the modules loaded for the GUI (gdmlogin, gdmgreeter, gdmchooser, etc.). > Although shutdown and restart of GDM would > be kinda ugly user experience, right? Blanking of the screen and > bringing it all back up again? It would probably be easier to modify > the PAM stack on the fly, and have GDM call pam_sm_authenticate() or > even pam_start() again, although just what changes are made, and to > which file, could prove tricky. The code you'ld probably want to modify is daemon/verify-pam.c, where the logic for interacting with PAM is located. The hard part is notifying GDM when it actually needs to do this, since it might already be in the middle of a PAM interaction. Perhaps adding a gdmflexiserver --command (look for GDM_SUP in gdm.[ch]) option would work well here. I'd make it work so it requires authentication so that random users cannot tell GDM to keep rebuilding the PAM stack. Or perhaps some other mechanism? But tearing down and restarting might be a good way to get it to just work in the short term, and then make it look pretty later. > Currently I have a GDM configuration file setting that specifies the > location of a "PAM prompt service". If the setting exists, then the > service (shared library) is loaded dynamically when a PAM_PROMPT_ECHO_ON > or PAM_PROMPT_ECHO_OFF message is handled. This service is started just > before the gdm_slave_greeter_ctl (GDM_PROMPT, m) call and terminated > when that call returns (or perhaps it is better to add this login where > GDM_PROMPT is handled). In my previous post I just called this "start > smartcard thread", but really it is just a service that basically > provides another way to get an input from the prompt -- in this case, > card insertion is detected and returns an empty username. The PAM module > knows what do if it gets an empty username and it detects a card. > Actually, this could be extended to other mechanisms such as > fingerprint-readers, etc -- anything that can be made to emulate a > response to a PAM_PROMPT_ECHO_ON or PAM_PROMPT_ECHO_OFF message, really. > > But if there's a GTK module that can do something similar, then I'll > look into it. Yes, sounds reasonable. I'd recommend using something like a GTK_MODULE. I think Ray Strode from RedHat is also working on some SmartCard code that works using GTK_MODULE. So perhaps you and he might want to trade emails and discuss, share code, or whatnot? He may respond to this thread, but if not, his email is: rstrode@redhat.com > BTW what do you mean by "restart GDM with the new PamStack configuration > setting"? Does PamStack mean the actual PAM stack (ie, the content of > /etc/pam.d/gdm) or are you referring to something within GDM? You > mention updating the GDM configuration file so I'm guessing the latter? > I'm using GDM 2.6.05 at the moment (since I am targetting what gets > shipped with RHEL4) and I don't see any "PamStack" in the code. > Apologies if I have misunderstood the reason why the GDM configuration > file should change. PamStack was added in 2.14.5. I'd recommend using this version (the latest 2.16 release would be better) since it has code like this to support things like SmartCard, dynamic PAM stack modification, etc. The value of security/PamStack is passed in as the 2nd argument to the create_pamh call, so the name of the PAM module to use can be configured in the GDM configuration files, starting with GDM version 2.14.5. As I mentioned before, this value can be set per-display. Refer to the GDM docs to see how to use per-display GDM configuration. http://www.gnome.org/projects/gdm/docs.html Brian From Geoff.Elgey@quest.com Tue Oct 17 19:59:51 2006 Return-Path: X-Original-To: gdm-list@gnome.org Delivered-To: gdm-list@gnome.org Received: from localhost (localhost.localdomain [127.0.0.1]) by menubar.gnome.org (Postfix) with ESMTP id 872F83B0071 for ; Tue, 17 Oct 2006 19:59:51 -0400 (EDT) Received: from menubar.gnome.org ([127.0.0.1]) by localhost (menubar.gnome.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 09654-03 for ; Tue, 17 Oct 2006 19:59:47 -0400 (EDT) Received: from irvbhxw03.quest.com (irvbhxw03.quest.com [12.106.87.70]) by menubar.gnome.org (Postfix) with ESMTP id 4B7593B0295 for ; Tue, 17 Oct 2006 19:59:36 -0400 (EDT) Received: from melmbxw01.prod.quest.corp ([10.20.4.118]) by irvbhxw03.quest.com with Microsoft SMTPSVC(6.0.3790.1830); Tue, 17 Oct 2006 16:59:35 -0700 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Date: Wed, 18 Oct 2006 09:59:33 +1000 Message-ID: <0BAEFFA7AFADFD4497F50DD093687E07130422@melmbxw01.prod.quest.corp> In-Reply-To: <453568A0.80305@sun.com> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: [gdm-list] GDM smartcard hack Thread-Index: AcbyRN5vuf4jdcynRXeFhiajJNFCRQAANN1Q From: "Geoff Elgey" To: "Brian Cameron" X-OriginalArrivalTime: 17 Oct 2006 23:59:36.0080 (UTC) FILETIME=[4C72D900:01C6F248] X-Virus-Scanned: by amavisd-new at gnome.org X-Spam-Status: No, score=-2.589 tagged_above=-999 required=2 tests=[AWL=0.010, BAYES_00=-2.599] X-Spam-Score: -2.589 X-Spam-Level: Cc: gdm-list@gnome.org Subject: Re: [gdm-list] GDM smartcard hack X-BeenThere: gdm-list@gnome.org X-Mailman-Version: 2.1.8 Precedence: list List-Id: GNOME Display Manager List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 17 Oct 2006 23:59:51 -0000 G'day, =20 > You probably need to hack the PAM module if you want a=20 > different label. > It'd be gross to change the prompt in the GDM GUI code, I'd think. I didn't want to change labels, just wondering if it is possible to not display an edit field until one is actually needed (ie, when a PIN is requested, not before). But on reflection "until one is actually needed" is too hard to figure out.=20 > PamStack was added in 2.14.5. I'd recommend using this version (the > latest 2.16 release would be better) since it has code like this to > support things like SmartCard, dynamic PAM stack modification, etc. Thanks for the info. I'll look into supporting later versions.=20 -- Geoff From Brian.Cameron@Sun.COM Tue Oct 17 23:11:03 2006 Return-Path: X-Original-To: gdm-list@gnome.org Delivered-To: gdm-list@gnome.org Received: from localhost (localhost.localdomain [127.0.0.1]) by menubar.gnome.org (Postfix) with ESMTP id E41133B00B2 for ; Tue, 17 Oct 2006 23:11:02 -0400 (EDT) Received: from menubar.gnome.org ([127.0.0.1]) by localhost (menubar.gnome.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 17107-05 for ; Tue, 17 Oct 2006 23:11:02 -0400 (EDT) Received: from brmea-mail-4.sun.com (brmea-mail-4.Sun.COM [192.18.98.36]) by menubar.gnome.org (Postfix) with ESMTP id B8F183B00A2 for ; Tue, 17 Oct 2006 23:11:01 -0400 (EDT) Received: from fe-amer-01.sun.com ([192.18.108.175]) by brmea-mail-4.sun.com (8.13.6+Sun/8.12.9) with ESMTP id k9I3B01H018610 for ; Tue, 17 Oct 2006 21:11:01 -0600 (MDT) Received: from conversion-daemon.mail-amer.sun.com by mail-amer.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) id <0J7B00D019YTT500@mail-amer.sun.com> (original mail from Brian.Cameron@Sun.COM) for gdm-list@gnome.org; Tue, 17 Oct 2006 21:11:00 -0600 (MDT) Received: from [10.255.134.52] ([208.54.95.129]) by mail-amer.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) with ESMTPSA id <0J7B00B8XA68P053@mail-amer.sun.com>; Tue, 17 Oct 2006 21:11:00 -0600 (MDT) Date: Tue, 17 Oct 2006 22:10:58 -0500 From: Brian Cameron In-reply-to: <0BAEFFA7AFADFD4497F50DD093687E07130422@melmbxw01.prod.quest.corp> Sender: Brian.Cameron@Sun.COM To: Geoff Elgey Message-id: <45359B42.2080807@sun.com> MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT References: <0BAEFFA7AFADFD4497F50DD093687E07130422@melmbxw01.prod.quest.corp> User-Agent: Mail/News 1.5.0.4 (X11/20060613) X-Virus-Scanned: by amavisd-new at gnome.org X-Spam-Status: No, score=-1.441 tagged_above=-999 required=2 tests=[AWL=-0.401, BAYES_00=-2.599, RCVD_IN_BL_SPAMCOP_NET=1.558, UNPARSEABLE_RELAY=0.001] X-Spam-Score: -1.441 X-Spam-Level: Cc: gdm-list@gnome.org Subject: Re: [gdm-list] GDM smartcard hack X-BeenThere: gdm-list@gnome.org X-Mailman-Version: 2.1.8 Precedence: list List-Id: GNOME Display Manager List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 18 Oct 2006 03:11:03 -0000 Geoff: >> You probably need to hack the PAM module if you want a >> different label. >> It'd be gross to change the prompt in the GDM GUI code, I'd think. > > I didn't want to change labels, just wondering if it is possible to not > display an edit field until one is actually needed (ie, when a PIN is > requested, not before). But on reflection "until one is actually needed" > is too hard to figure out. I would entertain enhancing GDM to do special things like this if people figure out ways to make it work cleanly and generically with PAM. I do not plan to accept patches that hack GDM to work with specific PAM modules. >> PamStack was added in 2.14.5. I'd recommend using this version (the >> latest 2.16 release would be better) since it has code like this to >> support things like SmartCard, dynamic PAM stack modification, etc. > > Thanks for the info. I'll look into supporting later versions. You could probably patch your older GDM to have this PamStack feature if you wanted. Though the per-display configuration stuff is very useful for supporting SmartCard in multi-display environments. You could also backport that work, but it would be a bit of work to do. I'd recommend just moving to the newer GDM, which is designed to better support SmartCard style setups. Brian From Robert.Doolittle@Sun.COM Wed Oct 18 09:46:11 2006 Return-Path: X-Original-To: gdm-list@gnome.org Delivered-To: gdm-list@gnome.org Received: from localhost (localhost.localdomain [127.0.0.1]) by menubar.gnome.org (Postfix) with ESMTP id C64EB3B009C for ; Wed, 18 Oct 2006 09:46:11 -0400 (EDT) Received: from menubar.gnome.org ([127.0.0.1]) by localhost (menubar.gnome.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 17518-03 for ; Wed, 18 Oct 2006 09:46:07 -0400 (EDT) Received: from nwk-ea-fw-1.sun.com (nwk-ea-fw-1.sun.com [192.18.42.249]) by menubar.gnome.org (Postfix) with ESMTP id CE21C3B0077 for ; Wed, 18 Oct 2006 09:46:06 -0400 (EDT) Received: from d1-sfbay-09.sun.com ([192.18.39.119]) by nwk-ea-fw-1.sun.com (8.13.6+Sun/8.12.9) with ESMTP id k9IDk6ZK006911 for ; Wed, 18 Oct 2006 06:46:06 -0700 (PDT) Received: from conversion-daemon.d1-sfbay-09.sun.com by d1-sfbay-09.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) id <0J7C005013JYHI00@d1-sfbay-09.sun.com> (original mail from Robert.Doolittle@Sun.COM) for gdm-list@gnome.org; Wed, 18 Oct 2006 06:46:06 -0700 (PDT) Received: from [192.9.61.82] by d1-sfbay-09.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) with ESMTPSA id <0J7C00JJ73KTLJJJ@d1-sfbay-09.sun.com>; Wed, 18 Oct 2006 06:46:06 -0700 (PDT) Date: Wed, 18 Oct 2006 09:46:04 -0400 From: Bob Doolittle In-reply-to: <453568A0.80305@sun.com> Sender: Robert.Doolittle@Sun.COM To: Brian Cameron Message-id: <4536301C.4020701@Sun.COM> MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT References: <0BAEFFA7AFADFD4497F50DD093687E07130421@melmbxw01.prod.quest.corp> <453568A0.80305@sun.com> User-Agent: Thunderbird 1.5.0.7 (X11/20060915) X-Virus-Scanned: by amavisd-new at gnome.org X-Spam-Status: No, score=-2.445 tagged_above=-999 required=2 tests=[AWL=-0.078, BAYES_00=-2.599, TW_DM=0.077, TW_GD=0.077, TW_GT=0.077, UNPARSEABLE_RELAY=0.001] X-Spam-Score: -2.445 X-Spam-Level: Cc: gdm-list@gnome.org, Geoff Elgey Subject: Re: [gdm-list] GDM smartcard hack X-BeenThere: gdm-list@gnome.org X-Mailman-Version: 2.1.8 Precedence: list List-Id: GNOME Display Manager List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 18 Oct 2006 13:46:11 -0000 Brian Cameron wrote: >> [As an aside, even the smartcard only case still presents a "Username:" >> prompt under GDM, at least with all the themes I have tried. Is it >> possible to have a UI that only displays a prompt field when a PIN is >> required? That is, after card insertion has been recognized?] >> > > You probably need to hack the PAM module if you want a different label. > It'd be gross to change the prompt in the GDM GUI code, I'd think. > What PAM module is generating this label? Typically a username prompt is generated by a call to pam_get_user(). pam_get_user() will only generate the prompt if the PAM_USER item is unset. So, the way to avoid the prompt (assuming you know who the user is) is to set PAM_USER. If you intend to get the username off of the card after unlocking it, I suspect you could temporarily set PAM_USER to something bogus, then prompt for your PIN and do your authentication, unlock the card, retrieve the *real* username, and set PAM_USER to the correct value. It should be harmless to have PAM_USER set to some arbitrary junk temporarily within a PAM module, as long as it's set properly (or unset, if authentication fails) upon return from pam_authenticate(). And, it's been said many times on this list before - avoid doing *anything* special inside of GDM regarding smartcards. Don't you care about unlocking existing sessions with smartcards also? Typically you do, so it's best to put whatever event mechanisms you need in a separate daemon that can talk to your PAM module as necessary. Then you can leverage that daemon and your PAM module from other contexts such as screen savers. If you must do something within GDM, try to make it minimal so you have less to recreate when attempting to port the work to other contexts. -Bob >>> This PAM module (or a separate daemon or a GTK_MODULE loaded >>> into the GDM daemon) should be listening for SmartCard >>> insertion) and should shutdown and restart GDM with the new >>> PamStack configuration setting. >>> >> Interesting -- I need to learn more about GTK_MODULE, if it can be >> loaded in to the GDM daemon. >> > > Actually gdm-binary doesn't use GTK_MODULE since it doesn't normally > call gtk_main (unless it needs to pop up a GUI dialog after dropping > down to the gdm user). However, implementing a module structure > that works like GTK_MODULE for GDM would be the way to do this, I think. > Refer to the GTK+ documentation to learn about GTK_MODULE and how it > is implemented. > > Note that AddGtkModules and GtkModulesList in the GDM configuration > code only applies to the modules loaded for the GUI (gdmlogin, > gdmgreeter, gdmchooser, etc.). > > > Although shutdown and restart of GDM would > > be kinda ugly user experience, right? Blanking of the screen and > > bringing it all back up again? It would probably be easier to modify > > the PAM stack on the fly, and have GDM call pam_sm_authenticate() or > > even pam_start() again, although just what changes are made, and to > > which file, could prove tricky. > > The code you'ld probably want to modify is daemon/verify-pam.c, where > the logic for interacting with PAM is located. The hard part is > notifying GDM when it actually needs to do this, since it might already > be in the middle of a PAM interaction. Perhaps adding a gdmflexiserver > --command (look for GDM_SUP in gdm.[ch]) option would work well here. > I'd make it work so it requires authentication so that random users > cannot tell GDM to keep rebuilding the PAM stack. Or perhaps some > other mechanism? > > But tearing down and restarting might be a good way to get it to just > work in the short term, and then make it look pretty later. > > >> Currently I have a GDM configuration file setting that specifies the >> location of a "PAM prompt service". If the setting exists, then the >> service (shared library) is loaded dynamically when a PAM_PROMPT_ECHO_ON >> or PAM_PROMPT_ECHO_OFF message is handled. This service is started just >> before the gdm_slave_greeter_ctl (GDM_PROMPT, m) call and terminated >> when that call returns (or perhaps it is better to add this login where >> GDM_PROMPT is handled). In my previous post I just called this "start >> smartcard thread", but really it is just a service that basically >> provides another way to get an input from the prompt -- in this case, >> card insertion is detected and returns an empty username. The PAM module >> knows what do if it gets an empty username and it detects a card. >> Actually, this could be extended to other mechanisms such as >> fingerprint-readers, etc -- anything that can be made to emulate a >> response to a PAM_PROMPT_ECHO_ON or PAM_PROMPT_ECHO_OFF message, really. >> >> But if there's a GTK module that can do something similar, then I'll >> look into it. >> > > Yes, sounds reasonable. I'd recommend using something like a > GTK_MODULE. I think Ray Strode from RedHat is also working on some > SmartCard code that works using GTK_MODULE. So perhaps you and he might > want to trade emails and discuss, share code, or whatnot? > > He may respond to this thread, but if not, his email is: > > rstrode@redhat.com > > >> BTW what do you mean by "restart GDM with the new PamStack configuration >> setting"? Does PamStack mean the actual PAM stack (ie, the content of >> /etc/pam.d/gdm) or are you referring to something within GDM? You >> mention updating the GDM configuration file so I'm guessing the latter? >> I'm using GDM 2.6.05 at the moment (since I am targetting what gets >> shipped with RHEL4) and I don't see any "PamStack" in the code. >> Apologies if I have misunderstood the reason why the GDM configuration >> file should change. >> > > PamStack was added in 2.14.5. I'd recommend using this version (the > latest 2.16 release would be better) since it has code like this to > support things like SmartCard, dynamic PAM stack modification, etc. > > The value of security/PamStack is passed in as the 2nd argument > to the create_pamh call, so the name of the PAM module to use can be > configured in the GDM configuration files, starting with GDM > version 2.14.5. > > As I mentioned before, this value can be set per-display. Refer to > the GDM docs to see how to use per-display GDM configuration. > > http://www.gnome.org/projects/gdm/docs.html > > Brian > _______________________________________________ > gdm-list mailing list > gdm-list@gnome.org > http://mail.gnome.org/mailman/listinfo/gdm-list > From udovdh@xs4all.nl Fri Oct 27 10:17:58 2006 Return-Path: X-Original-To: gdm-list@gnome.org Delivered-To: gdm-list@gnome.org Received: from localhost (localhost.localdomain [127.0.0.1]) by menubar.gnome.org (Postfix) with ESMTP id 86A4A3B0094 for ; Fri, 27 Oct 2006 10:17:58 -0400 (EDT) Received: from menubar.gnome.org ([127.0.0.1]) by localhost (menubar.gnome.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 10367-09 for ; Fri, 27 Oct 2006 10:17:53 -0400 (EDT) Received: from smtp-vbr17.xs4all.nl (smtp-vbr17.xs4all.nl [194.109.24.37]) by menubar.gnome.org (Postfix) with ESMTP id DCBBA3B00AC for ; Fri, 27 Oct 2006 10:17:52 -0400 (EDT) Received: from [192.168.10.69] (pindarots.xs4all.nl [82.92.197.115]) (authenticated bits=0) by smtp-vbr17.xs4all.nl (8.13.8/8.13.8) with ESMTP id k9REHpa6032022 for ; Fri, 27 Oct 2006 16:17:51 +0200 (CEST) (envelope-from udovdh@xs4all.nl) Message-ID: <4542150E.7040504@xs4all.nl> Date: Fri, 27 Oct 2006 16:17:50 +0200 From: Udo van den Heuvel User-Agent: Thunderbird 1.5.0.7 (Windows/20060909) MIME-Version: 1.0 To: gdm-list@gnome.org X-Enigmail-Version: 0.94.0.0 OpenPGP: id=8300CC02 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit X-Virus-Scanned: by XS4ALL Virus Scanner X-Virus-Scanned: by amavisd-new at gnome.org X-Spam-Status: No, score=-0.108 tagged_above=-999 required=2 tests=[BAYES_40=-0.185, TW_GD=0.077] X-Spam-Score: -0.108 X-Spam-Level: Subject: [gdm-list] gdm and -ignoreABI for Xorg in Fedore Core 6 X-BeenThere: gdm-list@gnome.org X-Mailman-Version: 2.1.8 Precedence: list List-Id: GNOME Display Manager List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 27 Oct 2006 14:17:58 -0000 Hello, To get my Matrox G550 working with dual screens in Fedora Core 6 (with Xorg 7.1.1) I need to pass the -ignoreABI parameter to Xorg. When the machine boots by itself it automagically starts X and takes care of `building` the desktop I use. Where in the gdm configs can I tell Xorg to use the -ignoreABI parameter on the commandline? Thanks and kind regards, Udo From desrt@desrt.ca Fri Oct 27 10:39:18 2006 Return-Path: X-Original-To: gdm-list@gnome.org Delivered-To: gdm-list@gnome.org Received: from localhost (localhost.localdomain [127.0.0.1]) by menubar.gnome.org (Postfix) with ESMTP id CC6643B00B3 for ; Fri, 27 Oct 2006 10:39:18 -0400 (EDT) Received: from menubar.gnome.org ([127.0.0.1]) by localhost (menubar.gnome.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 12075-09 for ; Fri, 27 Oct 2006 10:39:12 -0400 (EDT) Received: from coriana6.cis.mcmaster.ca (coriana6.CIS.McMaster.CA [130.113.128.17]) by menubar.gnome.org (Postfix) with ESMTP id 06D543B0094 for ; Fri, 27 Oct 2006 10:39:12 -0400 (EDT) Received: from Gorash7.UTS.McMaster.CA (Gorash7.UTS.McMaster.CA [130.113.196.61]) by coriana6.cis.mcmaster.ca (8.13.7/8.13.7) with ESMTP id k9REd53x003360; Fri, 27 Oct 2006 10:39:10 -0400 (EDT) Received: from cgpsrv1.cis.mcmaster.ca (muss.CIS.McMaster.CA [130.113.64.9]) by Gorash7.UTS.McMaster.CA (8.13.7/8.13.7) with ESMTP id k9REc22B021854; Fri, 27 Oct 2006 10:38:02 -0400 Received: from gabriel.cas.mcmaster.ca ([130.113.70.96] verified) by cgpsrv1.cis.mcmaster.ca (CommuniGate Pro SMTP 4.1.8) with ESMTP-TLS id 104703211; Fri, 27 Oct 2006 10:38:34 -0400 From: Ryan Lortie To: Udo van den Heuvel In-Reply-To: <4542150E.7040504@xs4all.nl> References: <4542150E.7040504@xs4all.nl> Content-Type: text/plain Organization: McMaster University Date: Fri, 27 Oct 2006 10:36:46 -0400 Message-Id: <1161959806.9884.0.camel@localhost.localdomain> Mime-Version: 1.0 X-Mailer: Evolution 2.6.1 Content-Transfer-Encoding: 7bit X-PMX-Version-Mac: 4.7.1.128075, Antispam-Engine: 2.4.0.264935, Antispam-Data: 2006.10.27.63432 X-PerlMx-Spam: Gauge=IIIIIII, Probability=7%, Report='__CP_URI_IN_BODY 0, __CT 0, __CTE 0, __CT_TEXT_PLAIN 0, __HAS_MSGID 0, __HAS_X_MAILER 0, __MIME_TEXT_ONLY 0, __MIME_VERSION 0, __SANE_MSGID 0' X-Virus-Scanned: by amavisd-new at gnome.org X-Spam-Status: No, score=-2.539 tagged_above=-999 required=2 tests=[AWL=-0.017, BAYES_00=-2.599, TW_GD=0.077] X-Spam-Score: -2.539 X-Spam-Level: Cc: gdm-list@gnome.org Subject: Re: [gdm-list] gdm and -ignoreABI for Xorg in Fedore Core 6 X-BeenThere: gdm-list@gnome.org X-Mailman-Version: 2.1.8 Precedence: list List-Id: GNOME Display Manager List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 27 Oct 2006 14:39:19 -0000 Hi Udo In /etc/X11/gdm/gdm.conf you will find this section (or similar): ... [server-Standard] name=Standard server command=/usr/bin/X -br -audit 0 ... Just add -ignoreABI to the command= line. Cheers On Fri, 2006-27-10 at 16:17 +0200, Udo van den Heuvel wrote: > Hello, > > To get my Matrox G550 working with dual screens in Fedora Core 6 (with > Xorg 7.1.1) I need to pass the -ignoreABI parameter to Xorg. > When the machine boots by itself it automagically starts X and takes > care of `building` the desktop I use. > Where in the gdm configs can I tell Xorg to use the -ignoreABI parameter > on the commandline? > > Thanks and kind regards, > Udo > _______________________________________________ > gdm-list mailing list > gdm-list@gnome.org > http://mail.gnome.org/mailman/listinfo/gdm-list From udovdh@xs4all.nl Fri Oct 27 10:51:12 2006 Return-Path: X-Original-To: gdm-list@gnome.org Delivered-To: gdm-list@gnome.org Received: from localhost (localhost.localdomain [127.0.0.1]) by menubar.gnome.org (Postfix) with ESMTP id CE8183B00EA for ; Fri, 27 Oct 2006 10:51:12 -0400 (EDT) Received: from menubar.gnome.org ([127.0.0.1]) by localhost (menubar.gnome.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 13436-10 for ; Fri, 27 Oct 2006 10:51:07 -0400 (EDT) Received: from smtp-vbr12.xs4all.nl (smtp-vbr12.xs4all.nl [194.109.24.32]) by menubar.gnome.org (Postfix) with ESMTP id 9949A3B0130 for ; Fri, 27 Oct 2006 10:51:06 -0400 (EDT) Received: from [192.168.10.69] (pindarots.xs4all.nl [82.92.197.115]) (authenticated bits=0) by smtp-vbr12.xs4all.nl (8.13.8/8.13.8) with ESMTP id k9REp2Fs098272; Fri, 27 Oct 2006 16:51:03 +0200 (CEST) (envelope-from udovdh@xs4all.nl) Message-ID: <45421CD6.3050707@xs4all.nl> Date: Fri, 27 Oct 2006 16:51:02 +0200 From: Udo van den Heuvel User-Agent: Thunderbird 1.5.0.7 (Windows/20060909) MIME-Version: 1.0 To: gdm-list@gnome.org References: <4542150E.7040504@xs4all.nl> <1161959806.9884.0.camel@localhost.localdomain> In-Reply-To: <1161959806.9884.0.camel@localhost.localdomain> X-Enigmail-Version: 0.94.0.0 OpenPGP: id=8300CC02 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit X-Virus-Scanned: by XS4ALL Virus Scanner X-Virus-Scanned: by amavisd-new at gnome.org X-Spam-Status: No, score=-2.522 tagged_above=-999 required=2 tests=[BAYES_00=-2.599, TW_GD=0.077] X-Spam-Score: -2.522 X-Spam-Level: Subject: Re: [gdm-list] gdm and -ignoreABI for Xorg in Fedore Core 6 X-BeenThere: gdm-list@gnome.org X-Mailman-Version: 2.1.8 Precedence: list List-Id: GNOME Display Manager List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 27 Oct 2006 14:51:13 -0000 Hello Ryan, Thanks for the quick repy. Ryan Lortie wrote: > In /etc/X11/gdm/gdm.conf you will find this section (or similar): > > ... > [server-Standard] > name=Standard server > command=/usr/bin/X -br -audit 0 > ... > > Just add -ignoreABI to the command= line. I have no such file on my Fedora Core 6 system. Under /etc/gdm there is: ./XKeepsCrashing ./securitytokens.conf ./locale.alias ./custom.conf ./PostLogin ./PostLogin/Default.sample ./Init ./Init/Default ./PreSession ./PreSession/Default ./PostSession ./PostSession/Default ./modules ./modules/AccessKeyMouseEvents ./modules/factory-AccessDwellMouseEvents ./modules/factory-AccessKeyMouseEvents ./modules/AccessDwellMouseEvents ./Xsession custom.conf looks promising but my few tries did not give any effect. Any idea about what I should try next? Kind regards, Udo From desrt@desrt.ca Fri Oct 27 11:34:22 2006 Return-Path: X-Original-To: gdm-list@gnome.org Delivered-To: gdm-list@gnome.org Received: from localhost (localhost.localdomain [127.0.0.1]) by menubar.gnome.org (Postfix) with ESMTP id A59503B016E for ; Fri, 27 Oct 2006 11:34:22 -0400 (EDT) Received: from menubar.gnome.org ([127.0.0.1]) by localhost (menubar.gnome.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 18073-01 for ; Fri, 27 Oct 2006 11:34:16 -0400 (EDT) Received: from sigma957.cis.mcmaster.ca (sigma957.CIS.McMaster.CA [130.113.64.83]) by menubar.gnome.org (Postfix) with ESMTP id 313F73B00DE for ; Fri, 27 Oct 2006 11:34:16 -0400 (EDT) Received: from Gorash7.UTS.McMaster.CA (Gorash7.UTS.McMaster.CA [130.113.196.61]) by sigma957.cis.mcmaster.ca (8.13.7/8.13.7) with ESMTP id k9RFY8TY006056; Fri, 27 Oct 2006 11:34:15 -0400 (EDT) Received: from cgpsrv1.cis.mcmaster.ca (muss.CIS.McMaster.CA [130.113.64.9]) by Gorash7.UTS.McMaster.CA (8.13.7/8.13.7) with ESMTP id k9RFX29V024782; Fri, 27 Oct 2006 11:33:02 -0400 Received: from gabriel.cas.mcmaster.ca ([130.113.70.96] verified) by cgpsrv1.cis.mcmaster.ca (CommuniGate Pro SMTP 4.1.8) with ESMTP-TLS id 104708070; Fri, 27 Oct 2006 11:33:33 -0400 From: Ryan Lortie To: Udo van den Heuvel In-Reply-To: <45421CD6.3050707@xs4all.nl> References: <4542150E.7040504@xs4all.nl> <1161959806.9884.0.camel@localhost.localdomain> <45421CD6.3050707@xs4all.nl> Content-Type: text/plain Organization: McMaster University Date: Fri, 27 Oct 2006 11:31:45 -0400 Message-Id: <1161963105.10035.2.camel@localhost.localdomain> Mime-Version: 1.0 X-Mailer: Evolution 2.6.1 Content-Transfer-Encoding: 7bit X-PMX-Version-Mac: 4.7.1.128075, Antispam-Engine: 2.4.0.264935, Antispam-Data: 2006.10.27.73433 X-PerlMx-Spam: Gauge=IIIIIII, Probability=7%, Report='__CT 0, __CTE 0, __CT_TEXT_PLAIN 0, __HAS_MSGID 0, __HAS_X_MAILER 0, __MIME_TEXT_ONLY 0, __MIME_VERSION 0, __SANE_MSGID 0' X-Virus-Scanned: by amavisd-new at gnome.org X-Spam-Status: No, score=-2.536 tagged_above=-999 required=2 tests=[AWL=-0.014, BAYES_00=-2.599, TW_GD=0.077] X-Spam-Score: -2.536 X-Spam-Level: Cc: gdm-list@gnome.org Subject: Re: [gdm-list] gdm and -ignoreABI for Xorg in Fedore Core 6 X-BeenThere: gdm-list@gnome.org X-Mailman-Version: 2.1.8 Precedence: list List-Id: GNOME Display Manager List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 27 Oct 2006 15:34:22 -0000 Try this: grep -r '\[daemon\]' /etc This should find any gdm config file living in /etc. It may find some other things like gnome-vfs modules, but there should not be too much to sift through. If this doesn't work you might expand your search by looking in, for example, /usr/share and then in /usr. You could also 'locate gdm' and look for likely candidates among that list. One of these suggestions should allow you to find the file. Good luck :) On Fri, 2006-27-10 at 16:51 +0200, Udo van den Heuvel wrote: > Hello Ryan, > > Thanks for the quick repy. > > I have no such file on my Fedora Core 6 system. > > Any idea about what I should try next? From udovdh@xs4all.nl Fri Oct 27 11:47:46 2006 Return-Path: X-Original-To: gdm-list@gnome.org Delivered-To: gdm-list@gnome.org Received: from localhost (localhost.localdomain [127.0.0.1]) by menubar.gnome.org (Postfix) with ESMTP id 02EB83B0130 for ; Fri, 27 Oct 2006 11:47:46 -0400 (EDT) Received: from menubar.gnome.org ([127.0.0.1]) by localhost (menubar.gnome.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 18736-09 for ; Fri, 27 Oct 2006 11:47:42 -0400 (EDT) Received: from smtp-vbr11.xs4all.nl (smtp-vbr11.xs4all.nl [194.109.24.31]) by menubar.gnome.org (Postfix) with ESMTP id 4B4503B0240 for ; Fri, 27 Oct 2006 11:47:41 -0400 (EDT) Received: from [192.168.10.69] (pindarots.xs4all.nl [82.92.197.115]) (authenticated bits=0) by smtp-vbr11.xs4all.nl (8.13.8/8.13.8) with ESMTP id k9RFld6u035225 for ; Fri, 27 Oct 2006 17:47:40 +0200 (CEST) (envelope-from udovdh@xs4all.nl) Message-ID: <45422A1B.70309@xs4all.nl> Date: Fri, 27 Oct 2006 17:47:39 +0200 From: Udo van den Heuvel User-Agent: Thunderbird 1.5.0.7 (Windows/20060909) MIME-Version: 1.0 To: gdm-list@gnome.org References: <4542150E.7040504@xs4all.nl> <1161959806.9884.0.camel@localhost.localdomain> <45421CD6.3050707@xs4all.nl> <1161963105.10035.2.camel@localhost.localdomain> In-Reply-To: <1161963105.10035.2.camel@localhost.localdomain> X-Enigmail-Version: 0.94.0.0 OpenPGP: id=8300CC02 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit X-Virus-Scanned: by XS4ALL Virus Scanner X-Virus-Scanned: by amavisd-new at gnome.org X-Spam-Status: No, score=-2.522 tagged_above=-999 required=2 tests=[BAYES_00=-2.599, TW_GD=0.077] X-Spam-Score: -2.522 X-Spam-Level: Subject: Re: [gdm-list] gdm and -ignoreABI for Xorg in Fedore Core 6 X-BeenThere: gdm-list@gnome.org X-Mailman-Version: 2.1.8 Precedence: list List-Id: GNOME Display Manager List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 27 Oct 2006 15:47:46 -0000 Hello Ryan, Ryan Lortie wrote: > Try this: > > grep -r '\[daemon\]' /etc > > This should find any gdm config file living in /etc. It may find some > other things like gnome-vfs modules, but there should not be too much to > sift through. Only /etc/gdm has an empty [daemon] section. custom.conf has taken the place of gdm.conf I found while googlin'. But I fixed the gdm issue. I reinstalled an older Matrox driver that had no ABI issue (except for the HAL). Then I ran gdmsetup. Under Security -> Configure X Server... the Command can be edited. custom.conf now has at the bottom: [server-Standard] name=Standard server command=/usr/bin/Xorg -audit 0 -ignoreABI chooser=false handled=true flexible=true priority=0 With this entry the situation is like it was before the FC6 upgrade: one big desktop over two screens. Thanks for the responses! Udo From Brian.Cameron@Sun.COM Mon Oct 30 17:43:37 2006 Return-Path: X-Original-To: gdm-list@gnome.org Delivered-To: gdm-list@gnome.org Received: from localhost (localhost.localdomain [127.0.0.1]) by menubar.gnome.org (Postfix) with ESMTP id 9B4163B0135; Mon, 30 Oct 2006 17:43:37 -0500 (EST) Received: from menubar.gnome.org ([127.0.0.1]) by localhost (menubar.gnome.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 06116-02; Mon, 30 Oct 2006 17:43:31 -0500 (EST) Received: from brmea-mail-1.sun.com (brmea-mail-1.Sun.COM [192.18.98.31]) by menubar.gnome.org (Postfix) with ESMTP id 517883B013B; Mon, 30 Oct 2006 17:43:29 -0500 (EST) Received: from fe-amer-03.sun.com ([192.18.108.177]) by brmea-mail-1.sun.com (8.13.6+Sun/8.12.9) with ESMTP id k9UMhSIP017610; Mon, 30 Oct 2006 15:43:28 -0700 (MST) Received: from conversion-daemon.mail-amer.sun.com by mail-amer.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) id <0J7Z0050105VW700@mail-amer.sun.com> (original mail from Brian.Cameron@Sun.COM); Mon, 30 Oct 2006 15:43:28 -0700 (MST) Received: from [10.255.134.53] ([208.54.76.190]) by mail-amer.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) with ESMTPSA id <0J7Z0040L0GGJWZ2@mail-amer.sun.com>; Mon, 30 Oct 2006 15:43:28 -0700 (MST) Date: Mon, 30 Oct 2006 16:43:30 -0600 From: Brian Cameron Sender: Brian.Cameron@Sun.COM To: gnome-announce-list@gnome.org, gdm-list@gnome.org Message-id: <45468012.2090209@sun.com> MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT User-Agent: Thunderbird 2.0a1 (X11/20061011) X-Virus-Scanned: by amavisd-new at gnome.org X-Spam-Status: No, score=-2.076 tagged_above=-999 required=2 tests=[AWL=0.368, BAYES_00=-2.599, TW_GD=0.077, TW_PM=0.077, UNPARSEABLE_RELAY=0.001] X-Spam-Score: -2.076 X-Spam-Level: Subject: [gdm-list] GDM2 2.16.2 (stable), the "Combo" Release X-BeenThere: gdm-list@gnome.org X-Mailman-Version: 2.1.8 Precedence: list List-Id: GNOME Display Manager List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 30 Oct 2006 22:43:37 -0000 AOOH-GAH -------- (If you have no clue what GDM is, skip a few paragraphs down first) The 2.16.2 release is a stable release of GDM with the following new features: - Now support for "combo" style lists, and id values of "session" and "language" are supported for displaying the session/language lists as drop-down combos. (Brian Cameron). For example: - Now OK/Start Again buttons are sensitive/insensitive in a more sensible way for both gdmlogin and gdmgreeter (if GTK style buttons are used in gdmgreeter). (Brian Cameron) - Face Browser widget and background rectangle (for gdmgreeter) is not shown if there are no users to display. (Brian Cameron) - Help button now enabled in gdmphotosetup. (Matthias Clasen) - Fix so that if timed user script returns an invalid user that timed login is not turned on. (Andrew) - Fix bug that was causing %t to be expanded improperly when used in the timed login label. (Brian Cameron) - Set authdir to NULL after freeing to avoid accessing an invalid pointer. Fixes bug #359831. (Amnon Aaronsohn) - Leaks fixed. (Kjartan Maraas) - Translation updates (Abel Cheung, Priit Laes, Daniel Nylander) Note: GDM2 was originally written by Martin K. Petersen . Much work has been done on GDM2 by George Lebl, and Brian Cameron currently shares maintainership duties with the Queen of England. Note2: If installing from the tarball do note that make install overwrites most of the setup files, all except gdm.conf. It will however save backups with the .orig extension first. #ifndef GDM_DISABLE_DEPRECATED Note3: Note3 has been depracated ... #endif /* GDM_DISABLE_DEPRECATED */ Downloading: ============ Online Documentation - http://www.gnome.org/projects/gdm/ Latest Stable - http://ftp.gnome.org/pub/GNOME/sources/gdm/2.16/ Latest Unstable - http://ftp.gnome.org/pub/GNOME/sources/gdm/2.17/ No RPM this time around BTW. Have fun. A spec file is included though, so you can try: rpmbuild -ta gdm-whatever.tar.gz Have fun, Brian From Brian.Cameron@Sun.COM Mon Oct 30 17:45:39 2006 Return-Path: X-Original-To: gdm-list@gnome.org Delivered-To: gdm-list@gnome.org Received: from localhost (localhost.localdomain [127.0.0.1]) by menubar.gnome.org (Postfix) with ESMTP id 6811E3B00C9; Mon, 30 Oct 2006 17:45:39 -0500 (EST) Received: from menubar.gnome.org ([127.0.0.1]) by localhost (menubar.gnome.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 06116-05; Mon, 30 Oct 2006 17:45:35 -0500 (EST) Received: from brmea-mail-1.sun.com (brmea-mail-1.Sun.COM [192.18.98.31]) by menubar.gnome.org (Postfix) with ESMTP id 275193B007D; Mon, 30 Oct 2006 17:45:35 -0500 (EST) Received: from fe-amer-06.sun.com ([192.18.108.180]) by brmea-mail-1.sun.com (8.13.6+Sun/8.12.9) with ESMTP id k9UMjYwo021094; Mon, 30 Oct 2006 15:45:34 -0700 (MST) Received: from conversion-daemon.mail-amer.sun.com by mail-amer.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) id <0J7Z00E0102RS400@mail-amer.sun.com> (original mail from Brian.Cameron@Sun.COM); Mon, 30 Oct 2006 15:45:34 -0700 (MST) Received: from [10.255.134.53] ([208.54.76.190]) by mail-amer.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) with ESMTPSA id <0J7Z001RO0JXY5Q4@mail-amer.sun.com>; Mon, 30 Oct 2006 15:45:34 -0700 (MST) Date: Mon, 30 Oct 2006 16:45:35 -0600 From: Brian Cameron Sender: Brian.Cameron@Sun.COM To: gnome-announce-list@gnome.org, gdm-list@gnome.org Message-id: <4546808F.8050503@sun.com> MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT User-Agent: Thunderbird 2.0a1 (X11/20061011) X-Virus-Scanned: by amavisd-new at gnome.org X-Spam-Status: No, score=-2.09 tagged_above=-999 required=2 tests=[AWL=0.277, BAYES_00=-2.599, TW_DM=0.077, TW_GD=0.077, TW_PM=0.077, UNPARSEABLE_RELAY=0.001] X-Spam-Score: -2.09 X-Spam-Level: Subject: [gdm-list] GDM2 2.17.1 (unstable), the "Now Working" Release X-BeenThere: gdm-list@gnome.org X-Mailman-Version: 2.1.8 Precedence: list List-Id: GNOME Display Manager List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 30 Oct 2006 22:45:39 -0000 AOOH-GAH -------- (If you have no clue what gdm is, skip a few paragraphs down first) The 2.17.1 release is an unstable release of GDM with the following new features. I wanted to do another release since 2.17.0 was crashing out-of-the-box due to the first issue listed below. Also this release has some really nice new usability improvements and custom command support. Read below... - No longer crash if at-spi-registryd cannot be started. (Ariel Rios) - Now support customcommands in GDM configuration so that sysadmins can specify custom commands to appear in the GDM GUI (in addition to reboot/shutdown/etc.). Refer to the comments in the GDM configuration file and documentation for details. Also support new QUERY_CUSTOM_CMD_LABELS and QUERY_CUSTOM_CMD_NO_RESTART_STATUS gdmflexiserver commands. (Lukasz Zalewski) - Now support for "combo" style lists, and id values of "session" and "language" are supported for displaying the session/language lists as drop-down combos. (Brian Cameron). For example: - Now OK/Start Again buttons are sensitive/insensitive in a more sensible way for both gdmlogin and gdmgreeter (if GTK style buttons are used in gdmgreeter). (Brian Cameron) - Face Browser widget and background rectangle (for gdmgreeter) is not shown if there are no users to display. (Brian Cameron) - Help button now enabled in gdmphotosetup. (Matthias Clasen) - Fix so that if timed user script returns an invalid user that timed login is not turned on. (Andrew) - Fix bug that was causing %t to be expanded improperly when used in the timed login label. (Brian Cameron) - Set authdir to NULL after freeing to avoid accessing an invalid pointer. Fixes bug #359831. (Amnon Aaronsohn) - Introduce altfile[n] property to cater for alternative image file definition in gdmgreeter themes. (Erwann Chenede) - Leaks fixed. (Kjartan Maraas) - Documentation improvements. (Malcolm Parsons) - Build improvements. (Brian Cameron) - Translation updates (Dwayne Bailey, Luca Ferretti, Satoru SATOH, Jens Seidel, Ilkka Tuohela) Note: GDM2 was originally written by Martin K. Petersen . Much work has been done on GDM2 by George Lebl, and Brian Cameron currently shares maintainership duties with the Queen of England. Note2: If installing from the tarball do note that make install overwrites most of the setup files, all except gdm.conf. It will however save backups with the .orig extension first. #ifndef GDM_DISABLE_DEPRECATED Note3: Note3 has been depracated ... #endif /* GDM_DISABLE_DEPRECATED */ Downloading: ============ Online Documentation - http://www.gnome.org/projects/gdm/ Latest Stable - http://ftp.gnome.org/pub/GNOME/sources/gdm/2.16/ Latest Unstable - http://ftp.gnome.org/pub/GNOME/sources/gdm/2.17/ No RPM this time around BTW. Have fun. A spec file is included though, so you can try: rpmbuild -ta gdm-whatever.tar.gz Have fun, Brian From cgpera@cpinfo.com.ar Mon Oct 2 14:00:03 2006 Return-Path: X-Original-To: gdm-list@gnome.org Delivered-To: gdm-list@gnome.org Received: from localhost (localhost.localdomain [127.0.0.1]) by menubar.gnome.org (Postfix) with ESMTP id B67D83B000B for ; Mon, 2 Oct 2006 14:00:03 -0400 (EDT) Received: from menubar.gnome.org ([127.0.0.1]) by localhost (menubar.gnome.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 24870-02 for ; Mon, 2 Oct 2006 14:00:01 -0400 (EDT) Received: from ar6.toservers.com (host106.200.80.42.ifxnw.com.ar [200.80.42.106]) by menubar.gnome.org (Postfix) with ESMTP id 554AA3B0075 for ; Mon, 2 Oct 2006 14:00:00 -0400 (EDT) Received: from cpinfo.com.ar (ar6.toservers.com [200.80.42.106]) by ar6.toservers.com (Postfix) with SMTP id 0184A3E41E8 for ; Mon, 2 Oct 2006 14:59:51 -0300 (ART) MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----_=_NextPart_001_01C6E64C.A1750D86" Date: Mon, 2 Oct 2006 15:02:20 -0300 Content-class: urn:content-classes:message X-MimeOLE: Produced By Microsoft Exchange V6.5.7226.0 Message-ID: <8F6FFF8EF8C256449319556FD5D2CCDC09E658@server02.sistelab.net> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: xdmcp error in gdm Thread-Index: AcbmTOedyED0LtD4Q3CHnsa9CRgabg== From: "Claudio G. Pera" To: X-Virus-Scanned: by amavisd-new at gnome.org X-Spam-Status: No, score=-0.527 tagged_above=-999 required=2 tests=[BAYES_20=-0.74, FORGED_RCVD_HELO=0.135, HTML_MESSAGE=0.001, TW_GD=0.077] X-Spam-Score: -0.527 X-Spam-Level: X-Mailman-Approved-At: Mon, 02 Oct 2006 18:34:19 -0400 Cc: "Claudio G. Pera" Subject: [gdm-list] xdmcp error in gdm X-BeenThere: gdm-list@gnome.org X-Mailman-Version: 2.1.8 Precedence: list List-Id: GNOME Display Manager List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 02 Oct 2006 18:00:03 -0000 This is a multi-part message in MIME format. ------_=_NextPart_001_01C6E64C.A1750D86 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Hi,=20 =20 We are using gdm with centos 3.8 (x86_64) (the same is happen if we use = RHEL 3.8) and we implemented xdmcp to use with exceed remote displays. When we accessed in local way, that is we log in in gdmgreeter = everything is ok. We access to apps without problem. When we configured gdm to accept remote petitions from clients, the = problem is that we can log in remotely and do our jobs without problem, = but when log out from the remote system, in the console we can't do = anything else. I tried many things, like xclock or xterm and the error = is=20 =20 $ xterm Xterm: Xt error: can't open display:0.0 =20 If we reset the X server all is fine. =20 We can run the xterm program if we add the -display word after the = command =20 $ xterm -display localhost:0.0 =20 (opens the terminal in gnome desktop) =20 We tried to investigate the PreSession and PostSession dirs, but we = can't figure what is happening. =20 Can you help us? =20 Thanks in advance. =20 Saludos. Claudio G. Pera SISTELAB S.A. Tel.54-11-4635-3304 / 2425 M=F3vil 15-5564-0707 e-mail cpera@cpinfo.com.ar =20 =20 ------_=_NextPart_001_01C6E64C.A1750D86 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable

Hi, =

 

We are = using gdm with centos 3.8 (x86_64) (the same is happen if we use RHEL 3.8) and we implemented xdmcp to use with exceed remote = displays.

When we = accessed in local way, that is we log in in gdmgreeter everything is ok. We access = to apps without problem.

When we = configured gdm to accept remote petitions from clients, the problem is that we can = log in remotely and do our jobs without problem, but when log out from the = remote system, in the console we can’t do anything else. I tried many = things, like xclock or xterm and the error is

 

$ = xterm

Xterm: Xt = error: can’t open display:0.0

 

If we = reset the X server all is fine.

 

We can run = the xterm program if we add the –display word after the = command

 

$ xterm = –display localhost:0.0

 

(opens the = terminal in gnome desktop)

 

We tried = to investigate the PreSession and PostSession dirs, but we can’t = figure what is happening.

 

Can you = help us?

 

Thanks in = advance.

 

Saludos.

Claudio G. Pera
SISTELAB S.A.
Tel.54-11-4635-330= 4 / 2425
M=F3vil 15-5564-0707
e-mail cpera@cpinfo.com.ar

 

------_=_NextPart_001_01C6E64C.A1750D86-- From Brian.Cameron@Sun.COM Mon Oct 2 19:41:48 2006 Return-Path: X-Original-To: gdm-list@gnome.org Delivered-To: gdm-list@gnome.org Received: from localhost (localhost.localdomain [127.0.0.1]) by menubar.gnome.org (Postfix) with ESMTP id 8A6613B0077; Mon, 2 Oct 2006 19:41:48 -0400 (EDT) Received: from menubar.gnome.org ([127.0.0.1]) by localhost (menubar.gnome.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 08581-08; Mon, 2 Oct 2006 19:41:47 -0400 (EDT) Received: from brmea-mail-2.sun.com (brmea-mail-2.Sun.COM [192.18.98.43]) by menubar.gnome.org (Postfix) with ESMTP id 633AA3B006D; Mon, 2 Oct 2006 19:41:47 -0400 (EDT) Received: from fe-amer-01.sun.com ([192.18.108.175]) by brmea-mail-2.sun.com (8.13.6+Sun/8.12.9) with ESMTP id k92Nflkx020224; Mon, 2 Oct 2006 17:41:47 -0600 (MDT) Received: from conversion-daemon.mail-amer.sun.com by mail-amer.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) id <0J6J00B017X0XJ00@mail-amer.sun.com> (original mail from Brian.Cameron@Sun.COM); Mon, 02 Oct 2006 17:41:47 -0600 (MDT) Received: from [192.168.2.4] ([76.16.240.134]) by mail-amer.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) with ESMTPSA id <0J6J000V28HIZ3T2@mail-amer.sun.com>; Mon, 02 Oct 2006 17:41:46 -0600 (MDT) Date: Mon, 02 Oct 2006 18:41:43 -0500 From: Brian Cameron Sender: Brian.Cameron@Sun.COM To: gnome-announce-list@gnome.org, gdm-list@gnome.org Message-id: <4521A3B7.6020409@sun.com> MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT User-Agent: Mail/News 1.5.0.4 (X11/20060613) X-Virus-Scanned: by amavisd-new at gnome.org X-Spam-Status: No, score=-2.367 tagged_above=-999 required=2 tests=[BAYES_00=-2.599, TW_DM=0.077, TW_GD=0.077, TW_PM=0.077, UNPARSEABLE_RELAY=0.001] X-Spam-Score: -2.367 X-Spam-Level: Subject: [gdm-list] GDM2 2.16.1 (stable), the "Hyde Park" Release X-BeenThere: gdm-list@gnome.org X-Mailman-Version: 2.1.8 Precedence: list List-Id: GNOME Display Manager List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 02 Oct 2006 23:41:48 -0000 AOOH-GAH -------- (If you have no clue what GDM is, skip a few paragraphs down first) The 2.16.1 release is a stable release of GDM with the following new features: - Use g_markup_printf_escaped so gdmsetup better handles description strings that contains things similar to a tag like an email address. Fixes bug #357998. (Matthias Clasen) - Fix gdmsetup so that the window manager close button works as the Close button in the dialog (Matthias Clasen) - Fix for bug #352838, avoid crashing by moving call to get GDM_KEY_SYSTEM_MENU until after authentication check. (Frederic Crozat) - Add g_type_init() to gdmflexiserver since this is needed for -a (authentication) code to work. - Translation updates (Rahul Bhalerao, Runa Bhattacharjee, Alessio Frusciante, Priit Laes, David Lodge, \303\205smund Skj\303\246veland) Note: GDM2 was originally written by Martin K. Petersen . Much work has been done on GDM2 by George Lebl, and Brian Cameron currently shares maintainership duties with the Queen of England. Note2: If installing from the tarball do note that make install overwrites most of the setup files, all except gdm.conf. It will however save backups with the .orig extension first. #ifndef GDM_DISABLE_DEPRECATED Note3: Note3 has been depracated ... #endif /* GDM_DISABLE_DEPRECATED */ Downloading: ============ Online Documentation - http://www.gnome.org/projects/gdm/ Latest Stable - http://ftp.gnome.org/pub/GNOME/sources/gdm/2.16/ Latest Unstable - http://ftp.gnome.org/pub/GNOME/sources/gdm/2.17/ No RPM this time around BTW. Have fun. A spec file is included though, so you can try: rpmbuild -ta gdm-whatever.tar.gz Have fun, Brian From pnewman@mainframe.ca Wed Oct 4 17:27:22 2006 Return-Path: X-Original-To: gdm-list@gnome.org Delivered-To: gdm-list@gnome.org Received: from localhost (localhost.localdomain [127.0.0.1]) by menubar.gnome.org (Postfix) with ESMTP id 38AFD3B00DA for ; Wed, 4 Oct 2006 17:27:22 -0400 (EDT) Received: from menubar.gnome.org ([127.0.0.1]) by localhost (menubar.gnome.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 05859-08 for ; Wed, 4 Oct 2006 17:27:18 -0400 (EDT) Received: from mail.mainframe.ca (wale.mainframe.ca [209.17.131.74]) by menubar.gnome.org (Postfix) with ESMTP id 1A7D93B000F for ; Wed, 4 Oct 2006 17:27:18 -0400 (EDT) Received: from h209-17-131-89.gtconnect.net ([209.17.131.89] helo=mail.mainframe.ca) by mail.mainframe.ca with esmtp (Exim 4.63 (FreeBSD)) (envelope-from ) id 1GVEGn-000DoN-KZ for gdm-list@gnome.org; Wed, 04 Oct 2006 14:27:13 -0700 Received: from [172.16.139.185] by mail.mainframe.ca with esmtp (Exim 4.63 (FreeBSD)) (envelope-from ) id 1GVEDt-000PbF-V3 for gdm-list@gnome.org; Wed, 04 Oct 2006 14:24:14 -0700 Message-ID: <4524272C.3070700@mainframe.ca> Date: Wed, 04 Oct 2006 14:27:08 -0700 From: Paul Newman Organization: Mainframe Entertainment Inc. User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.7) Gecko/20050414 X-Accept-Language: en-us, en MIME-Version: 1.0 To: gdm-list@gnome.org Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit X-Virus-Scanned: by amavisd-new at gnome.org X-Spam-Status: No, score=0.213 tagged_above=-999 required=2 tests=[BAYES_50=0.001, FORGED_RCVD_HELO=0.135, TW_GD=0.077] X-Spam-Score: 0.213 X-Spam-Level: X-Mailman-Approved-At: Thu, 05 Oct 2006 19:26:53 -0400 Subject: [gdm-list] who shuts down monitor X-BeenThere: gdm-list@gnome.org X-Mailman-Version: 2.1.8 Precedence: list List-Id: GNOME Display Manager List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 04 Oct 2006 21:27:22 -0000 Hi. I've searched the mailing lists and documentation pages and have found nothing on configuring the screen saver behavior in gdm when idling on the graphical login screen. It appears that rather than just blanking the screen, the idle login screen powers down the screen. How do I change this behavior so that the screen blanks instead of powering down. thanks, p From Brian.Cameron@Sun.COM Thu Oct 5 21:07:44 2006 Return-Path: X-Original-To: gdm-list@gnome.org Delivered-To: gdm-list@gnome.org Received: from localhost (localhost.localdomain [127.0.0.1]) by menubar.gnome.org (Postfix) with ESMTP id 06ED03B0008 for ; Thu, 5 Oct 2006 21:07:44 -0400 (EDT) Received: from menubar.gnome.org ([127.0.0.1]) by localhost (menubar.gnome.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 12785-06 for ; Thu, 5 Oct 2006 21:07:41 -0400 (EDT) Received: from brmea-mail-2.sun.com (brmea-mail-2.Sun.COM [192.18.98.43]) by menubar.gnome.org (Postfix) with ESMTP id A222A3B0012 for ; Thu, 5 Oct 2006 21:07:40 -0400 (EDT) Received: from fe-amer-10.sun.com ([192.18.108.184]) by brmea-mail-2.sun.com (8.13.6+Sun/8.12.9) with ESMTP id k9617dZV021531 for ; Thu, 5 Oct 2006 19:07:40 -0600 (MDT) Received: from conversion-daemon.mail-amer.sun.com by mail-amer.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) id <0J6O00A01WGQ4F00@mail-amer.sun.com> (original mail from Brian.Cameron@Sun.COM) for gdm-list@gnome.org; Thu, 05 Oct 2006 19:07:39 -0600 (MDT) Received: from [129.150.12.230] by mail-amer.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) with ESMTPSA id <0J6O00I8NWGP1W8O@mail-amer.sun.com>; Thu, 05 Oct 2006 19:07:39 -0600 (MDT) Date: Thu, 05 Oct 2006 20:07:39 -0500 From: Brian Cameron In-reply-to: <4524272C.3070700@mainframe.ca> Sender: Brian.Cameron@Sun.COM To: Paul Newman Message-id: <4525AC5B.1010801@sun.com> MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT References: <4524272C.3070700@mainframe.ca> User-Agent: Mail/News 1.5.0.4 (X11/20060613) X-Virus-Scanned: by amavisd-new at gnome.org X-Spam-Status: No, score=-2.526 tagged_above=-999 required=2 tests=[AWL=-0.005, BAYES_00=-2.599, TW_GD=0.077, UNPARSEABLE_RELAY=0.001] X-Spam-Score: -2.526 X-Spam-Level: X-Mailman-Approved-At: Thu, 05 Oct 2006 21:10:44 -0400 Subject: Re: [gdm-list] who shuts down monitor X-BeenThere: gdm-list@gnome.org X-Mailman-Version: 2.1.8 Precedence: list List-Id: GNOME Display Manager List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 06 Oct 2006 01:07:44 -0000 Paul: This can be managed in a few ways. Some systems support the ability to turn this feature on at a lower level than GDM. This is probably the best way. To do it with GDM, you can use BackgroundProgram configuration key. Note that running programs from GDM can compromise security. If, for example, if the program you choose to run can be compromised. It is recommended to run a launcher program that causes the program to be run with lowest privilege (such as the "gdm" user). There are docs in the /usr/share/gdm/defaults.conf for this key, and in the GDM docs. Let me know if you need extra help setting this up. http://www.gnome.org/projects/gdm/docs/2.15/configuration.html Brian > I've searched the mailing lists and documentation pages and have found > nothing on configuring the screen saver behavior in gdm when idling on > the graphical login screen. > > It appears that rather than just blanking the screen, the idle login > screen powers down the screen. How do I change this behavior so that the > screen blanks instead of powering down. > > thanks, > > p > > _______________________________________________ > gdm-list mailing list > gdm-list@gnome.org > http://mail.gnome.org/mailman/listinfo/gdm-list From plouc2ploum@googlemail.com Mon Oct 9 11:10:28 2006 Return-Path: X-Original-To: gdm-list@gnome.org Delivered-To: gdm-list@gnome.org Received: from localhost (localhost.localdomain [127.0.0.1]) by menubar.gnome.org (Postfix) with ESMTP id A3B3A3B0076 for ; Mon, 9 Oct 2006 11:10:24 -0400 (EDT) Received: from menubar.gnome.org ([127.0.0.1]) by localhost (menubar.gnome.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 32558-09 for ; Mon, 9 Oct 2006 11:10:22 -0400 (EDT) Received: from ug-out-1314.google.com (ug-out-1314.google.com [66.249.92.169]) by menubar.gnome.org (Postfix) with ESMTP id DE2293B00E3 for ; Mon, 9 Oct 2006 11:10:18 -0400 (EDT) Received: by ug-out-1314.google.com with SMTP id 74so652183ugb for ; Mon, 09 Oct 2006 08:10:18 -0700 (PDT) Received: by 10.78.178.5 with SMTP id a5mr5435684huf; Mon, 09 Oct 2006 08:10:17 -0700 (PDT) Received: by 10.78.197.9 with HTTP; Mon, 9 Oct 2006 08:10:17 -0700 (PDT) Message-ID: <85059290610090810n99de82ap54af9a75e0a77dcb@mail.gmail.com> Date: Mon, 9 Oct 2006 16:10:17 +0100 From: "Ste Phane" To: gdm-list@gnome.org MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_Part_51960_11354794.1160406617712" X-Virus-Scanned: by amavisd-new at gnome.org X-Spam-Status: No, score=-2.412 tagged_above=-999 required=2 tests=[AWL=0.187, BAYES_00=-2.599, HTML_MESSAGE=0.001, SPF_PASS=-0.001] X-Spam-Score: -2.412 X-Spam-Level: X-Mailman-Approved-At: Mon, 09 Oct 2006 11:26:50 -0400 Subject: [gdm-list] letters appear as squares X-BeenThere: gdm-list@gnome.org X-Mailman-Version: 2.1.8 Precedence: list List-Id: GNOME Display Manager List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 09 Oct 2006 15:10:28 -0000 ------=_Part_51960_11354794.1160406617712 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline Hi I recently made an upgrade on my debian box. Since then all the letters from gnome appear as rectangles, as shown on the screenshot on the webpage http://photos1.blogger.com/blogger/5251/3982/1600/squares.jpg I remember that at one point in the upgrade I've been asked if I wanted to replace a config file about logger or debconf or something else, I haven't written down what it was... Could someone show me how to correct that problem? Thanks in advance Steph ------=_Part_51960_11354794.1160406617712 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Content-Disposition: inline Hi

I recently made an upgrade on my debian box. Since then all the letters from gnome appear as rectangles, as shown on the screenshot on the webpage  http://photos1.blogger.com/blogger/5251/3982/1600/squares.jpg
I remember that at one point in the upgrade I've been asked if I wanted to replace a config file about logger or debconf or something else, I haven't written down what it was...

Could someone show me how to correct that problem?
Thanks in advance

Steph ------=_Part_51960_11354794.1160406617712-- From plouc2ploum@googlemail.com Mon Oct 9 16:07:25 2006 Return-Path: X-Original-To: gdm-list@gnome.org Delivered-To: gdm-list@gnome.org Received: from localhost (localhost.localdomain [127.0.0.1]) by menubar.gnome.org (Postfix) with ESMTP id AC64A3B00AC for ; Mon, 9 Oct 2006 16:07:25 -0400 (EDT) Received: from menubar.gnome.org ([127.0.0.1]) by localhost (menubar.gnome.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 16244-08 for ; Mon, 9 Oct 2006 16:07:24 -0400 (EDT) Received: from ug-out-1314.google.com (ug-out-1314.google.com [66.249.92.173]) by menubar.gnome.org (Postfix) with ESMTP id CB1463B00C2 for ; Mon, 9 Oct 2006 16:07:23 -0400 (EDT) Received: by ug-out-1314.google.com with SMTP id 74so705589ugb for ; Mon, 09 Oct 2006 13:07:21 -0700 (PDT) Received: by 10.78.149.13 with SMTP id w13mr145348hud; Mon, 09 Oct 2006 13:07:20 -0700 (PDT) Received: by 10.78.197.9 with HTTP; Mon, 9 Oct 2006 13:07:20 -0700 (PDT) Message-ID: <85059290610091307m1a96e645vedc949cc3a3d6fd@mail.gmail.com> Date: Mon, 9 Oct 2006 21:07:20 +0100 From: "Ste Phane" To: gdm-list@gnome.org In-Reply-To: MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_Part_54784_29758677.1160424440560" References: X-Virus-Scanned: by amavisd-new at gnome.org X-Spam-Status: No, score=-2.109 tagged_above=-999 required=2 tests=[AWL=-0.160, BAYES_00=-2.599, HTML_40_50=0.496, HTML_MESSAGE=0.001, SPF_PASS=-0.001, TW_GD=0.077, TW_XF=0.077] X-Spam-Score: -2.109 X-Spam-Level: Subject: Re: [gdm-list] gdm-list Digest, Vol 15, Issue 3 X-BeenThere: gdm-list@gnome.org X-Mailman-Version: 2.1.8 Precedence: list List-Id: GNOME Display Manager List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 09 Oct 2006 20:07:25 -0000 ------=_Part_54784_29758677.1160424440560 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline Hello, I have installed xfce4 and it has solved my problem of characters that were showing as squares. On 10/9/06, gdm-list-request@gnome.org wrote: > > Send gdm-list mailing list submissions to > gdm-list@gnome.org > > To subscribe or unsubscribe via the World Wide Web, visit > http://mail.gnome.org/mailman/listinfo/gdm-list > or, via email, send a message with subject or body 'help' to > gdm-list-request@gnome.org > > You can reach the person managing the list at > gdm-list-owner@gnome.org > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of gdm-list digest..." > > > Today's Topics: > > 1. letters appear as squares (Ste Phane) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Mon, 9 Oct 2006 16:10:17 +0100 > From: "Ste Phane" > Subject: [gdm-list] letters appear as squares > To: gdm-list@gnome.org > Message-ID: > <85059290610090810n99de82ap54af9a75e0a77dcb@mail.gmail.com> > Content-Type: text/plain; charset="iso-8859-1" > > Hi > > I recently made an upgrade on my debian box. Since then all the letters > from > gnome appear as rectangles, as shown on the screenshot on the webpage > http://photos1.blogger.com/blogger/5251/3982/1600/squares.jpg > I remember that at one point in the upgrade I've been asked if I wanted to > replace a config file about logger or debconf or something else, I haven't > written down what it was... > > Could someone show me how to correct that problem? > Thanks in advance > > Steph > -------------- next part -------------- > An HTML attachment was scrubbed... > URL: /archives/gdm-list/attachments/20061009/bef2437c/attachment.htm > > ------------------------------ > > _______________________________________________ > gdm-list mailing list > gdm-list@gnome.org > http://mail.gnome.org/mailman/listinfo/gdm-list > > > End of gdm-list Digest, Vol 15, Issue 3 > *************************************** > ------=_Part_54784_29758677.1160424440560 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Content-Disposition: inline Hello, I have installed xfce4 and it has solved my problem of characters that were showing as squares.

On 10/9/06, gdm-list-request@gnome.org <gdm-list-request@gnome.org> wrote:
Send gdm-list mailing list submissions to
        gdm-list@gnome.org

To subscribe or unsubscribe via the World Wide Web, visit
         http://mail.gnome.org/mailman/listinfo/gdm-list
or, via email, send a message with subject or body 'help' to
        gdm-list-request@gnome.org

You can reach the person managing the list at
        gdm-list-owner@gnome.org

When replying, please edit your Subject line so it is more specific
than "Re: Contents of gdm-list digest..."


Today's Topics:

   1.  letters appear as squares (Ste Phane)


----------------------------------------------------------------------

Message: 1
Date: Mon, 9 Oct 2006 16:10:17 +0100
From: "Ste Phane" < plouc2ploum@googlemail.com>
Subject: [gdm-list] letters appear as squares
To: gdm-list@gnome.org
Message-ID:
        < 85059290610090810n99de82ap54af9a75e0a77dcb@mail.gmail.com>
Content-Type: text/plain; charset="iso-8859-1"

Hi

I recently made an upgrade on my debian box. Since then all the letters from
gnome appear as rectangles, as shown on the screenshot on the webpage
http://photos1.blogger.com/blogger/5251/3982/1600/squares.jpg
I remember that at one point in the upgrade I've been asked if I wanted to
replace a config file about logger or debconf or something else, I haven't
written down what it was...

Could someone show me how to correct that problem?
Thanks in advance

Steph
-------------- next part --------------
An HTML attachment was scrubbed...
URL: /archives/gdm-list/attachments/20061009/bef2437c/attachment.htm

------------------------------

_______________________________________________
gdm-list mailing list
gdm-list@gnome.org
http://mail.gnome.org/mailman/listinfo/gdm-list


End of gdm-list Digest, Vol 15, Issue 3
***************************************

------=_Part_54784_29758677.1160424440560-- From corey.burger@gmail.com Tue Oct 10 02:37:39 2006 Return-Path: X-Original-To: gdm-list@gnome.org Delivered-To: gdm-list@gnome.org Received: from localhost (localhost.localdomain [127.0.0.1]) by menubar.gnome.org (Postfix) with ESMTP id 6CCBF3B00B9 for ; Tue, 10 Oct 2006 02:37:39 -0400 (EDT) Received: from menubar.gnome.org ([127.0.0.1]) by localhost (menubar.gnome.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 09780-05 for ; Tue, 10 Oct 2006 02:37:38 -0400 (EDT) Received: from nf-out-0910.google.com (nf-out-0910.google.com [64.233.182.189]) by menubar.gnome.org (Postfix) with ESMTP id 367A93B000B for ; Tue, 10 Oct 2006 02:37:38 -0400 (EDT) Received: by nf-out-0910.google.com with SMTP id n15so198275nfc for ; Mon, 09 Oct 2006 23:37:37 -0700 (PDT) Received: by 10.82.142.9 with SMTP id p9mr743190bud; Mon, 09 Oct 2006 23:37:37 -0700 (PDT) Received: by 10.82.119.10 with HTTP; Mon, 9 Oct 2006 23:37:37 -0700 (PDT) Message-ID: <348bd6da0610092337j5e6d6a52hc15ae7bc12c449ab@mail.gmail.com> Date: Tue, 10 Oct 2006 02:37:37 -0400 From: "Corey Burger" To: gdm-list@gnome.org MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline X-Virus-Scanned: by amavisd-new at gnome.org X-Spam-Status: No, score=-2.383 tagged_above=-999 required=2 tests=[AWL=-0.060, BAYES_00=-2.599, DNS_FROM_RFC_ABUSE=0.2, SPF_PASS=-0.001, TW_GD=0.077] X-Spam-Score: -2.383 X-Spam-Level: Subject: [gdm-list] Notes from the hallway bof in Boston X-BeenThere: gdm-list@gnome.org X-Mailman-Version: 2.1.8 Precedence: list List-Id: GNOME Display Manager List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 10 Oct 2006 06:37:39 -0000 Hey all, Brian and I had a good discussion about some enhancements to GDM in the near future. Here are some things we talked about: 1. Using GDM to replace the splash screen. We talked more about how to do this. Ryan Lortie has been worked on a patch for this. You can see the notes and Ryan's patch at http://bugzilla.gnome.org/show_bug.cgi?id=355190 2. Extend the GDM xml to understand what parts of the UI are the background and which are the above it. This is needed for the above patch. Jimmac has been working on a new theme for Novell based on this stuff. 3. Locking down via pessulus. Notes at: http://bugzilla.gnome.org/show_bug.cgi?id=361000 Discussion of what sort of lockdown is needed on that bug 4. Change the language and session dialogs so that they can be either a drop down list or a combo box. http://bugzilla.gnome.org/show_bug.cgi?id=361069 5. GDM currently has code for a gdmlogin which is entirely seperate from the gdmgreeter (which most distro ship). The reason for this is because the greeter doesn't support screen magnifiers. If this is fixed, the gdmlogin code can go away. We also spoke about the ability to display arbitrary other things during the login process. The most likely case is to show the user some piece of text the user must view or agree to, such as an acceptable use policy or a legal notice. My thoughts are to show this via gdm, but another solution is to use zenity in the scripts that run before login. More discussion is needed to figure out how this interacts with the new gdm-past-login patch. Brian, did I miss anything? Corey From Brian.Cameron@Sun.COM Mon Oct 16 18:40:19 2006 Return-Path: X-Original-To: gdm-list@gnome.org Delivered-To: gdm-list@gnome.org Received: from localhost (localhost.localdomain [127.0.0.1]) by menubar.gnome.org (Postfix) with ESMTP id 56AAC3B006F; Mon, 16 Oct 2006 18:40:19 -0400 (EDT) Received: from menubar.gnome.org ([127.0.0.1]) by localhost (menubar.gnome.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 30647-10; Mon, 16 Oct 2006 18:40:16 -0400 (EDT) Received: from brmea-mail-3.sun.com (brmea-mail-3.Sun.COM [192.18.98.34]) by menubar.gnome.org (Postfix) with ESMTP id 5E83D3B000E; Mon, 16 Oct 2006 18:40:16 -0400 (EDT) Received: from fe-amer-04.sun.com ([192.18.108.178]) by brmea-mail-3.sun.com (8.13.6+Sun/8.12.9) with ESMTP id k9GMeFBL022726; Mon, 16 Oct 2006 16:40:15 -0600 (MDT) Received: from conversion-daemon.mail-amer.sun.com by mail-amer.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) id <0J79003011RGYN00@mail-amer.sun.com> (original mail from Brian.Cameron@Sun.COM); Mon, 16 Oct 2006 16:40:15 -0600 (MDT) Received: from [10.255.134.54] ([208.54.95.129]) by mail-amer.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) with ESMTPSA id <0J79007QU2Z2R7H6@mail-amer.sun.com>; Mon, 16 Oct 2006 16:40:15 -0600 (MDT) Date: Mon, 16 Oct 2006 17:40:16 -0500 From: Brian Cameron Sender: Brian.Cameron@Sun.COM To: gnome-announce-list@gnome.org Message-id: <45340A50.2080801@sun.com> MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT User-Agent: Mail/News 1.5.0.4 (X11/20060613) X-Virus-Scanned: by amavisd-new at gnome.org X-Spam-Status: No, score=-1.454 tagged_above=-999 required=2 tests=[AWL=-0.645, BAYES_00=-2.599, RCVD_IN_BL_SPAMCOP_NET=1.558, TW_DM=0.077, TW_GD=0.077, TW_PM=0.077, UNPARSEABLE_RELAY=0.001] X-Spam-Score: -1.454 X-Spam-Level: Cc: gdm-list@gnome.org Subject: [gdm-list] GDM2 2.17.0 (unstable), the "Reach For The Stars" Release X-BeenThere: gdm-list@gnome.org X-Mailman-Version: 2.1.8 Precedence: list List-Id: GNOME Display Manager List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 16 Oct 2006 22:40:19 -0000 AOOH-GAH -------- (If you have no clue what gdm is, skip a few paragraphs down first) The 2.17.0 release is an unstable release of GDM with the following new features. - Now when GDM_ADD_MODULES is set, GDM will launch at-spi-registryd. (Ariel Rios) - New SupportAutomount option which, when turned on, changes the way that GDM accesses the user's $HOME/.dmrc file so that automounted $HOME directories can be configured to work even when the automounter is not started with the --ghost option. (Jerzy Borkowski) - Fix so that if timed login script returns an invalid user, timed login is not turned on. Fix for bug #340148. (Andrew - andrewz@springsrescuemission.org). - Fix for bug #352838, avoid crashing by moving call to get GDM_KEY_SYSTEM_MENU until after authentication check. (Frederic Crozat) - Use g_markup_printf_escaped so gdmsetup better handles description strings that contains things similar to a tag like an email address. Fixes bug #357998. (Matthias Clasen) - Fix gdmsetup so that the window manager close button works as the Close button in the dialog. (Matthias Clasen) - Add g_type_init() to gdmflexiserver since this is needed for -a (authentication) code to work. (Brian Cameron) - Set authdir to NULL after freeing to avoid accessing an invalid pointer. Fix for bug #359831. (Amnon Aaronsohn) - Memory leaks fixed. (Kjartan Maraas) - Translation updates (Abel Cheung, Yair Hershkovitz, Raphael Higino, Priit Laes, \303\205smund Skj\303\246veland, Ivar Smolin) Note: GDM2 was originally written by Martin K. Petersen . Much work has been done on GDM2 by George Lebl, and Brian Cameron currently shares maintainership duties with the Queen of England. Note2: If installing from the tarball do note that make install overwrites most of the setup files, all except gdm.conf. It will however save backups with the .orig extension first. #ifndef GDM_DISABLE_DEPRECATED Note3: Note3 has been depracated ... #endif /* GDM_DISABLE_DEPRECATED */ Downloading: ============ Online Documentation - http://www.gnome.org/projects/gdm/ Latest Stable - http://ftp.gnome.org/pub/GNOME/sources/gdm/2.16/ Latest Unstable - http://ftp.gnome.org/pub/GNOME/sources/gdm/2.17/ No RPM this time around BTW. Have fun. A spec file is included though, so you can try: rpmbuild -ta gdm-whatever.tar.gz Have fun, Brian From Geoff.Elgey@quest.com Tue Oct 17 00:11:53 2006 Return-Path: X-Original-To: gdm-list@gnome.org Delivered-To: gdm-list@gnome.org Received: from localhost (localhost.localdomain [127.0.0.1]) by menubar.gnome.org (Postfix) with ESMTP id 09FBF3B0014 for ; Tue, 17 Oct 2006 00:11:53 -0400 (EDT) Received: from menubar.gnome.org ([127.0.0.1]) by localhost (menubar.gnome.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 11919-08 for ; Tue, 17 Oct 2006 00:11:52 -0400 (EDT) Received: from irvbhxw03.quest.com (irvbhxw03.quest.com [12.106.87.70]) by menubar.gnome.org (Postfix) with ESMTP id D56BF3B000A for ; Tue, 17 Oct 2006 00:11:51 -0400 (EDT) Received: from melmbxw01.prod.quest.corp ([10.20.4.118]) by irvbhxw03.quest.com with Microsoft SMTPSVC(6.0.3790.1830); Mon, 16 Oct 2006 21:11:51 -0700 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Date: Tue, 17 Oct 2006 14:11:50 +1000 Message-ID: <0BAEFFA7AFADFD4497F50DD093687E07130420@melmbxw01.prod.quest.corp> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: GDM smartcard hack Thread-Index: Acbxol6i+BDwxTk1SR+YgGOQzkVeVQ== From: "Geoff Elgey" To: X-OriginalArrivalTime: 17 Oct 2006 04:11:51.0714 (UTC) FILETIME=[5F939020:01C6F1A2] X-Virus-Scanned: by amavisd-new at gnome.org X-Spam-Status: No, score=-2.58 tagged_above=-999 required=2 tests=[AWL=0.019, BAYES_00=-2.599] X-Spam-Score: -2.58 X-Spam-Level: Subject: [gdm-list] GDM smartcard hack X-BeenThere: gdm-list@gnome.org X-Mailman-Version: 2.1.8 Precedence: list List-Id: GNOME Display Manager List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 17 Oct 2006 04:11:53 -0000 G'day, A while back I asked if there was any smartcard support in GDM.=20 All I really want at this point is to write out a PAM prompt such as "Insert card or enter username", and have GDM recognize if a card has been inserted. At that point the PAM conversation would return with an empty username and the PAM application would check if a card is present, and get the username from the card, etc. I've got a hacked version of GDM that starts a thread (in the greeter process) when PAM_PROMPT is found. This thread monitors the card status and if a card status is "present" then it writes the special symbol STX to stdout. This is read by the slave process and returned via gdm_slave_greeter_ctl() function. The thread exits when either a card is found to be present or an actual username is obtained at the prompt.=20 For example, in daemon/verify-pam.c: switch (msg[replies]->msg_style) { case PAM_PROMPT_ECHO_ON: ... /* Start a thread that will recognize a token */ gdm_slave_greeter_ctl_no_ret(GDM_TOKEN, _("insert")); /* Get a username. Token thread may force this to return */ s =3D gdm_slave_greeter_ctl (GDM_PROMPT, m); /* Stop token thread */ gdm_slave_greeter_ctl_no_ret(GDM_TOKEN, _("stop")); =20 This "sort of" emulates entering an empty username at the prompt and seems to work, although I do worry about corrupting stdout (ie, user enters a name at the prompt and inserts a card at the same time). I've glossed over a lot of details, but it's quite a hack and I'm wondering if there is a better way of doing this than starting my own monitoring thread and writing directly to stdout. For example, is it better to push an event on the Gtk queue rather than writing directly to stdout? I haven't been following the GDM changes too closely, so maybe some kind of smartcard functionality or "start a user service on demand" functionality already exists. Any thoughts appreciated. -- Geoff From Brian.Cameron@Sun.COM Tue Oct 17 18:07:02 2006 Return-Path: X-Original-To: gdm-list@gnome.org Delivered-To: gdm-list@gnome.org Received: from localhost (localhost.localdomain [127.0.0.1]) by menubar.gnome.org (Postfix) with ESMTP id 5F99D3B00A0 for ; Tue, 17 Oct 2006 18:07:02 -0400 (EDT) Received: from menubar.gnome.org ([127.0.0.1]) by localhost (menubar.gnome.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 03298-07 for ; Tue, 17 Oct 2006 18:06:58 -0400 (EDT) Received: from brmea-mail-2.sun.com (brmea-mail-2.Sun.COM [192.18.98.43]) by menubar.gnome.org (Postfix) with ESMTP id 1375E3B00F7 for ; Tue, 17 Oct 2006 18:06:58 -0400 (EDT) Received: from fe-amer-03.sun.com ([192.18.108.177]) by brmea-mail-2.sun.com (8.13.6+Sun/8.12.9) with ESMTP id k9HM6vAR023419 for ; Tue, 17 Oct 2006 16:06:57 -0600 (MDT) Received: from conversion-daemon.mail-amer.sun.com by mail-amer.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) id <0J7A00701VUYUL00@mail-amer.sun.com> (original mail from Brian.Cameron@Sun.COM) for gdm-list@gnome.org; Tue, 17 Oct 2006 16:06:57 -0600 (MDT) Received: from [129.150.80.249] by mail-amer.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) with ESMTPSA id <0J7A00LRBW3KE9T5@mail-amer.sun.com>; Tue, 17 Oct 2006 16:06:57 -0600 (MDT) Date: Tue, 17 Oct 2006 17:06:58 -0500 From: Brian Cameron In-reply-to: <0BAEFFA7AFADFD4497F50DD093687E07130420@melmbxw01.prod.quest.corp> Sender: Brian.Cameron@Sun.COM To: Geoff Elgey Message-id: <45355402.8090906@sun.com> MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT References: <0BAEFFA7AFADFD4497F50DD093687E07130420@melmbxw01.prod.quest.corp> User-Agent: Mail/News 1.5.0.4 (X11/20060613) X-Virus-Scanned: by amavisd-new at gnome.org X-Spam-Status: No, score=-2.525 tagged_above=-999 required=2 tests=[AWL=-0.004, BAYES_00=-2.599, TW_DM=0.077, UNPARSEABLE_RELAY=0.001] X-Spam-Score: -2.525 X-Spam-Level: Cc: gdm-list@gnome.org Subject: Re: [gdm-list] GDM smartcard hack X-BeenThere: gdm-list@gnome.org X-Mailman-Version: 2.1.8 Precedence: list List-Id: GNOME Display Manager List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 17 Oct 2006 22:07:02 -0000 Geoff: > A while back I asked if there was any smartcard support in GDM. Since GDM supports PAM, it should be possible to define a PAM module that will work with a SmartCard without needing to modify GDM. There might be some corner cases where the GUI can be improved to work better with PAM in general when using custom PAM modules, but we'll explore such issues when we have specific examples to discuss. > All I really want at this point is to write out a PAM prompt such as > "Insert card or enter username", and have GDM recognize if a card has > been inserted. At that point the PAM conversation would return with an > empty username and the PAM application would check if a card is present, > and get the username from the card, etc. It might be possible to get this sort of thing to work with one PAM module, but probably better to have separate modules for keyboard entry and SmartCard. PAM isn't really designed for a single PAM module to handle multiple kinds of authentication. I'd make it work something like this... The default PAM module would be the one for keyboard entry and would provide the prompt you want that says "you can also insert a SmartCard". This PAM module (or a separate daemon or a GTK_MODULE loaded into the GDM daemon) should be listening for SmartCard insertion) and should shutdown and restart GDM with the new PamStack configuration setting. This would just mean modifying the GDM configuration file and telling GDM to update the setting via gdmflexiserver --command "UPDATE_CONFIG key". This PAM module should grab the username from the smartcard and tell GDM to ask for password. Likewise, upon SmartCard removal (or perhaps also after a timeout if the user doesn't enter password in a long time), then the GUI should be reset with the original PamStack. Note that PamStack can be specified in per-display configuration, so you can have different PamStack values for different displays. In a multi- display environment, this allows one user to be using SmartCard and another user to be entering via keyboard simultaneously. You can specify the display with the key when using UPDATE_CONFIG for per-display usage. It might be a bit nicer if GDM were enhanced to not actually restart, but tear down and rebuild the PAM stack on the fly. Would be faster and avoid flicker as GDM goes down and up. But this is just a UI improvement. > I've got a hacked version of GDM that starts a thread (in the greeter > process) when PAM_PROMPT is found. This thread monitors the card status > and if a card status is "present" then it writes the special symbol STX > to stdout. This is read by the slave process and returned via > gdm_slave_greeter_ctl() function. The thread exits when either a card is > found to be present or an actual username is obtained at the prompt. I don't think it is appropriate to hack the GDM GUI code with specific code like this. Each SmartCard implementation, fingerprint reader, eye scanner, or whatever probably wants their own logic. Not good to clutter up the code. I'd recommend putting the code listening for SmartCard insertion/removal in a separate daemon, the PAM module itself or a GTK_MODULE that you could load with the GDM daemon. > For example, in daemon/verify-pam.c: > > switch (msg[replies]->msg_style) { > case PAM_PROMPT_ECHO_ON: > ... > > /* Start a thread that will recognize a token */ > gdm_slave_greeter_ctl_no_ret(GDM_TOKEN, _("insert")); > > /* Get a username. Token thread may force this to return */ > s = gdm_slave_greeter_ctl (GDM_PROMPT, m); > > /* Stop token thread */ > gdm_slave_greeter_ctl_no_ret(GDM_TOKEN, _("stop")); > > > This "sort of" emulates entering an empty username at the prompt and > seems to work, although I do worry about corrupting stdout (ie, user > enters a name at the prompt and inserts a card at the same time). > > I've glossed over a lot of details, but it's quite a hack and I'm > wondering if there is a better way of doing this than starting my own > monitoring thread and writing directly to stdout. For example, is it > better to push an event on the Gtk queue rather than writing directly to > stdout? > > I haven't been following the GDM changes too closely, so maybe some kind > of smartcard functionality or "start a user service on demand" > functionality already exists. > > Any thoughts appreciated. I think that there are better ways to integrate with PAM/SmartCard support than hacking up the GDM code like you suggest. Hopefully this gives you some pointers about how to make it work. Brian From Geoff.Elgey@quest.com Tue Oct 17 19:19:18 2006 Return-Path: X-Original-To: gdm-list@gnome.org Delivered-To: gdm-list@gnome.org Received: from localhost (localhost.localdomain [127.0.0.1]) by menubar.gnome.org (Postfix) with ESMTP id 0103A3B00CE for ; Tue, 17 Oct 2006 19:19:18 -0400 (EDT) Received: from menubar.gnome.org ([127.0.0.1]) by localhost (menubar.gnome.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 07665-02 for ; Tue, 17 Oct 2006 19:19:14 -0400 (EDT) Received: from irvbhxw03.quest.com (irvbhxw03.quest.com [12.106.87.70]) by menubar.gnome.org (Postfix) with ESMTP id 6C25E3B009C for ; Tue, 17 Oct 2006 19:19:14 -0400 (EDT) Received: from melmbxw01.prod.quest.corp ([10.20.4.118]) by irvbhxw03.quest.com with Microsoft SMTPSVC(6.0.3790.1830); Tue, 17 Oct 2006 16:19:14 -0700 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Date: Wed, 18 Oct 2006 09:19:12 +1000 Message-ID: <0BAEFFA7AFADFD4497F50DD093687E07130421@melmbxw01.prod.quest.corp> In-Reply-To: <45355402.8090906@sun.com> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: [gdm-list] GDM smartcard hack Thread-Index: AcbyOJSqoOXmKGk+QAypj4GcZ6iFmAABS/1w From: "Geoff Elgey" To: X-OriginalArrivalTime: 17 Oct 2006 23:19:14.0096 (UTC) FILETIME=[A8D56B00:01C6F242] X-Virus-Scanned: by amavisd-new at gnome.org X-Spam-Status: No, score=-2.586 tagged_above=-999 required=2 tests=[AWL=0.013, BAYES_00=-2.599] X-Spam-Score: -2.586 X-Spam-Level: Cc: gdm-list@gnome.org Subject: Re: [gdm-list] GDM smartcard hack X-BeenThere: gdm-list@gnome.org X-Mailman-Version: 2.1.8 Precedence: list List-Id: GNOME Display Manager List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 17 Oct 2006 23:19:18 -0000 G'day, =20 Thanks for the reply.=20 > It might be possible to get this sort of thing to work with=20 > one PAM module, but probably better to have separate modules=20 > for keyboard entry and SmartCard. PAM isn't really designed=20 > for a single PAM module to handle multiple kinds of authentication. I did gloss over a lot of stuff in my original message. The PAM modules I have that handles smartcard handles two cases: smartcard authentication only, or smartcard authentication with fallback to the next module in the PAM stack (which is typically a password-based PAM module). A different prompt is used for each case. Not technically pure (in the sense that adding a fingerprint reader for example between the smartcard and password modules on the stack would be tricky), but sufficient for my purposes.=20 [As an aside, even the smartcard only case still presents a "Username:" prompt under GDM, at least with all the themes I have tried. Is it possible to have a UI that only displays a prompt field when a PIN is required? That is, after card insertion has been recognized?] > This PAM module (or a separate daemon or a GTK_MODULE loaded=20 > into the GDM daemon) should be listening for SmartCard=20 > insertion) and should shutdown and restart GDM with the new=20 > PamStack configuration setting. Interesting -- I need to learn more about GTK_MODULE, if it can be loaded in to the GDM daemon. Although shutdown and restart of GDM would be kinda ugly user experience, right? Blanking of the screen and bringing it all back up again? It would probably be easier to modify the PAM stack on the fly, and have GDM call pam_sm_authenticate() or even pam_start() again, although just what changes are made, and to which file, could prove tricky. Currently I have a GDM configuration file setting that specifies the location of a "PAM prompt service". If the setting exists, then the service (shared library) is loaded dynamically when a PAM_PROMPT_ECHO_ON or PAM_PROMPT_ECHO_OFF message is handled. This service is started just before the gdm_slave_greeter_ctl (GDM_PROMPT, m) call and terminated when that call returns (or perhaps it is better to add this login where GDM_PROMPT is handled). In my previous post I just called this "start smartcard thread", but really it is just a service that basically provides another way to get an input from the prompt -- in this case, card insertion is detected and returns an empty username. The PAM module knows what do if it gets an empty username and it detects a card. Actually, this could be extended to other mechanisms such as fingerprint-readers, etc -- anything that can be made to emulate a response to a PAM_PROMPT_ECHO_ON or PAM_PROMPT_ECHO_OFF message, really. But if there's a GTK module that can do something similar, then I'll look into it. BTW what do you mean by "restart GDM with the new PamStack configuration setting"? Does PamStack mean the actual PAM stack (ie, the content of /etc/pam.d/gdm) or are you referring to something within GDM? You mention updating the GDM configuration file so I'm guessing the latter? I'm using GDM 2.6.05 at the moment (since I am targetting what gets shipped with RHEL4) and I don't see any "PamStack" in the code. Apologies if I have misunderstood the reason why the GDM configuration file should change. -- Geoff From Brian.Cameron@Sun.COM Tue Oct 17 19:34:57 2006 Return-Path: X-Original-To: gdm-list@gnome.org Delivered-To: gdm-list@gnome.org Received: from localhost (localhost.localdomain [127.0.0.1]) by menubar.gnome.org (Postfix) with ESMTP id 9C9433B0071 for ; Tue, 17 Oct 2006 19:34:57 -0400 (EDT) Received: from menubar.gnome.org ([127.0.0.1]) by localhost (menubar.gnome.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 08379-04 for ; Tue, 17 Oct 2006 19:34:56 -0400 (EDT) Received: from brmea-mail-2.sun.com (brmea-mail-2.Sun.COM [192.18.98.43]) by menubar.gnome.org (Postfix) with ESMTP id 737703B0191 for ; Tue, 17 Oct 2006 19:34:56 -0400 (EDT) Received: from fe-amer-06.sun.com ([192.18.108.180]) by brmea-mail-2.sun.com (8.13.6+Sun/8.12.9) with ESMTP id k9HNYuVZ004768 for ; Tue, 17 Oct 2006 17:34:56 -0600 (MDT) Received: from conversion-daemon.mail-amer.sun.com by mail-amer.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) id <0J7A00J01Z9R7B00@mail-amer.sun.com> (original mail from Brian.Cameron@Sun.COM) for gdm-list@gnome.org; Tue, 17 Oct 2006 17:34:56 -0600 (MDT) Received: from [129.150.80.249] by mail-amer.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) with ESMTPSA id <0J7B001WC066Y6S3@mail-amer.sun.com>; Tue, 17 Oct 2006 17:34:56 -0600 (MDT) Date: Tue, 17 Oct 2006 18:34:56 -0500 From: Brian Cameron In-reply-to: <0BAEFFA7AFADFD4497F50DD093687E07130421@melmbxw01.prod.quest.corp> Sender: Brian.Cameron@Sun.COM To: Geoff Elgey Message-id: <453568A0.80305@sun.com> MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT References: <0BAEFFA7AFADFD4497F50DD093687E07130421@melmbxw01.prod.quest.corp> User-Agent: Mail/News 1.5.0.4 (X11/20060613) X-Virus-Scanned: by amavisd-new at gnome.org X-Spam-Status: No, score=-2.448 tagged_above=-999 required=2 tests=[AWL=-0.081, BAYES_00=-2.599, TW_DM=0.077, TW_GD=0.077, TW_GT=0.077, UNPARSEABLE_RELAY=0.001] X-Spam-Score: -2.448 X-Spam-Level: Cc: gdm-list@gnome.org Subject: Re: [gdm-list] GDM smartcard hack X-BeenThere: gdm-list@gnome.org X-Mailman-Version: 2.1.8 Precedence: list List-Id: GNOME Display Manager List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 17 Oct 2006 23:34:57 -0000 Geoff: > Thanks for the reply. > [As an aside, even the smartcard only case still presents a "Username:" > prompt under GDM, at least with all the themes I have tried. Is it > possible to have a UI that only displays a prompt field when a PIN is > required? That is, after card insertion has been recognized?] You probably need to hack the PAM module if you want a different label. It'd be gross to change the prompt in the GDM GUI code, I'd think. >> This PAM module (or a separate daemon or a GTK_MODULE loaded >> into the GDM daemon) should be listening for SmartCard >> insertion) and should shutdown and restart GDM with the new >> PamStack configuration setting. > > Interesting -- I need to learn more about GTK_MODULE, if it can be > loaded in to the GDM daemon. Actually gdm-binary doesn't use GTK_MODULE since it doesn't normally call gtk_main (unless it needs to pop up a GUI dialog after dropping down to the gdm user). However, implementing a module structure that works like GTK_MODULE for GDM would be the way to do this, I think. Refer to the GTK+ documentation to learn about GTK_MODULE and how it is implemented. Note that AddGtkModules and GtkModulesList in the GDM configuration code only applies to the modules loaded for the GUI (gdmlogin, gdmgreeter, gdmchooser, etc.). > Although shutdown and restart of GDM would > be kinda ugly user experience, right? Blanking of the screen and > bringing it all back up again? It would probably be easier to modify > the PAM stack on the fly, and have GDM call pam_sm_authenticate() or > even pam_start() again, although just what changes are made, and to > which file, could prove tricky. The code you'ld probably want to modify is daemon/verify-pam.c, where the logic for interacting with PAM is located. The hard part is notifying GDM when it actually needs to do this, since it might already be in the middle of a PAM interaction. Perhaps adding a gdmflexiserver --command (look for GDM_SUP in gdm.[ch]) option would work well here. I'd make it work so it requires authentication so that random users cannot tell GDM to keep rebuilding the PAM stack. Or perhaps some other mechanism? But tearing down and restarting might be a good way to get it to just work in the short term, and then make it look pretty later. > Currently I have a GDM configuration file setting that specifies the > location of a "PAM prompt service". If the setting exists, then the > service (shared library) is loaded dynamically when a PAM_PROMPT_ECHO_ON > or PAM_PROMPT_ECHO_OFF message is handled. This service is started just > before the gdm_slave_greeter_ctl (GDM_PROMPT, m) call and terminated > when that call returns (or perhaps it is better to add this login where > GDM_PROMPT is handled). In my previous post I just called this "start > smartcard thread", but really it is just a service that basically > provides another way to get an input from the prompt -- in this case, > card insertion is detected and returns an empty username. The PAM module > knows what do if it gets an empty username and it detects a card. > Actually, this could be extended to other mechanisms such as > fingerprint-readers, etc -- anything that can be made to emulate a > response to a PAM_PROMPT_ECHO_ON or PAM_PROMPT_ECHO_OFF message, really. > > But if there's a GTK module that can do something similar, then I'll > look into it. Yes, sounds reasonable. I'd recommend using something like a GTK_MODULE. I think Ray Strode from RedHat is also working on some SmartCard code that works using GTK_MODULE. So perhaps you and he might want to trade emails and discuss, share code, or whatnot? He may respond to this thread, but if not, his email is: rstrode@redhat.com > BTW what do you mean by "restart GDM with the new PamStack configuration > setting"? Does PamStack mean the actual PAM stack (ie, the content of > /etc/pam.d/gdm) or are you referring to something within GDM? You > mention updating the GDM configuration file so I'm guessing the latter? > I'm using GDM 2.6.05 at the moment (since I am targetting what gets > shipped with RHEL4) and I don't see any "PamStack" in the code. > Apologies if I have misunderstood the reason why the GDM configuration > file should change. PamStack was added in 2.14.5. I'd recommend using this version (the latest 2.16 release would be better) since it has code like this to support things like SmartCard, dynamic PAM stack modification, etc. The value of security/PamStack is passed in as the 2nd argument to the create_pamh call, so the name of the PAM module to use can be configured in the GDM configuration files, starting with GDM version 2.14.5. As I mentioned before, this value can be set per-display. Refer to the GDM docs to see how to use per-display GDM configuration. http://www.gnome.org/projects/gdm/docs.html Brian From Geoff.Elgey@quest.com Tue Oct 17 19:59:51 2006 Return-Path: X-Original-To: gdm-list@gnome.org Delivered-To: gdm-list@gnome.org Received: from localhost (localhost.localdomain [127.0.0.1]) by menubar.gnome.org (Postfix) with ESMTP id 872F83B0071 for ; Tue, 17 Oct 2006 19:59:51 -0400 (EDT) Received: from menubar.gnome.org ([127.0.0.1]) by localhost (menubar.gnome.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 09654-03 for ; Tue, 17 Oct 2006 19:59:47 -0400 (EDT) Received: from irvbhxw03.quest.com (irvbhxw03.quest.com [12.106.87.70]) by menubar.gnome.org (Postfix) with ESMTP id 4B7593B0295 for ; Tue, 17 Oct 2006 19:59:36 -0400 (EDT) Received: from melmbxw01.prod.quest.corp ([10.20.4.118]) by irvbhxw03.quest.com with Microsoft SMTPSVC(6.0.3790.1830); Tue, 17 Oct 2006 16:59:35 -0700 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Date: Wed, 18 Oct 2006 09:59:33 +1000 Message-ID: <0BAEFFA7AFADFD4497F50DD093687E07130422@melmbxw01.prod.quest.corp> In-Reply-To: <453568A0.80305@sun.com> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: [gdm-list] GDM smartcard hack Thread-Index: AcbyRN5vuf4jdcynRXeFhiajJNFCRQAANN1Q From: "Geoff Elgey" To: "Brian Cameron" X-OriginalArrivalTime: 17 Oct 2006 23:59:36.0080 (UTC) FILETIME=[4C72D900:01C6F248] X-Virus-Scanned: by amavisd-new at gnome.org X-Spam-Status: No, score=-2.589 tagged_above=-999 required=2 tests=[AWL=0.010, BAYES_00=-2.599] X-Spam-Score: -2.589 X-Spam-Level: Cc: gdm-list@gnome.org Subject: Re: [gdm-list] GDM smartcard hack X-BeenThere: gdm-list@gnome.org X-Mailman-Version: 2.1.8 Precedence: list List-Id: GNOME Display Manager List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 17 Oct 2006 23:59:51 -0000 G'day, =20 > You probably need to hack the PAM module if you want a=20 > different label. > It'd be gross to change the prompt in the GDM GUI code, I'd think. I didn't want to change labels, just wondering if it is possible to not display an edit field until one is actually needed (ie, when a PIN is requested, not before). But on reflection "until one is actually needed" is too hard to figure out.=20 > PamStack was added in 2.14.5. I'd recommend using this version (the > latest 2.16 release would be better) since it has code like this to > support things like SmartCard, dynamic PAM stack modification, etc. Thanks for the info. I'll look into supporting later versions.=20 -- Geoff From Brian.Cameron@Sun.COM Tue Oct 17 23:11:03 2006 Return-Path: X-Original-To: gdm-list@gnome.org Delivered-To: gdm-list@gnome.org Received: from localhost (localhost.localdomain [127.0.0.1]) by menubar.gnome.org (Postfix) with ESMTP id E41133B00B2 for ; Tue, 17 Oct 2006 23:11:02 -0400 (EDT) Received: from menubar.gnome.org ([127.0.0.1]) by localhost (menubar.gnome.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 17107-05 for ; Tue, 17 Oct 2006 23:11:02 -0400 (EDT) Received: from brmea-mail-4.sun.com (brmea-mail-4.Sun.COM [192.18.98.36]) by menubar.gnome.org (Postfix) with ESMTP id B8F183B00A2 for ; Tue, 17 Oct 2006 23:11:01 -0400 (EDT) Received: from fe-amer-01.sun.com ([192.18.108.175]) by brmea-mail-4.sun.com (8.13.6+Sun/8.12.9) with ESMTP id k9I3B01H018610 for ; Tue, 17 Oct 2006 21:11:01 -0600 (MDT) Received: from conversion-daemon.mail-amer.sun.com by mail-amer.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) id <0J7B00D019YTT500@mail-amer.sun.com> (original mail from Brian.Cameron@Sun.COM) for gdm-list@gnome.org; Tue, 17 Oct 2006 21:11:00 -0600 (MDT) Received: from [10.255.134.52] ([208.54.95.129]) by mail-amer.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) with ESMTPSA id <0J7B00B8XA68P053@mail-amer.sun.com>; Tue, 17 Oct 2006 21:11:00 -0600 (MDT) Date: Tue, 17 Oct 2006 22:10:58 -0500 From: Brian Cameron In-reply-to: <0BAEFFA7AFADFD4497F50DD093687E07130422@melmbxw01.prod.quest.corp> Sender: Brian.Cameron@Sun.COM To: Geoff Elgey Message-id: <45359B42.2080807@sun.com> MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT References: <0BAEFFA7AFADFD4497F50DD093687E07130422@melmbxw01.prod.quest.corp> User-Agent: Mail/News 1.5.0.4 (X11/20060613) X-Virus-Scanned: by amavisd-new at gnome.org X-Spam-Status: No, score=-1.441 tagged_above=-999 required=2 tests=[AWL=-0.401, BAYES_00=-2.599, RCVD_IN_BL_SPAMCOP_NET=1.558, UNPARSEABLE_RELAY=0.001] X-Spam-Score: -1.441 X-Spam-Level: Cc: gdm-list@gnome.org Subject: Re: [gdm-list] GDM smartcard hack X-BeenThere: gdm-list@gnome.org X-Mailman-Version: 2.1.8 Precedence: list List-Id: GNOME Display Manager List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 18 Oct 2006 03:11:03 -0000 Geoff: >> You probably need to hack the PAM module if you want a >> different label. >> It'd be gross to change the prompt in the GDM GUI code, I'd think. > > I didn't want to change labels, just wondering if it is possible to not > display an edit field until one is actually needed (ie, when a PIN is > requested, not before). But on reflection "until one is actually needed" > is too hard to figure out. I would entertain enhancing GDM to do special things like this if people figure out ways to make it work cleanly and generically with PAM. I do not plan to accept patches that hack GDM to work with specific PAM modules. >> PamStack was added in 2.14.5. I'd recommend using this version (the >> latest 2.16 release would be better) since it has code like this to >> support things like SmartCard, dynamic PAM stack modification, etc. > > Thanks for the info. I'll look into supporting later versions. You could probably patch your older GDM to have this PamStack feature if you wanted. Though the per-display configuration stuff is very useful for supporting SmartCard in multi-display environments. You could also backport that work, but it would be a bit of work to do. I'd recommend just moving to the newer GDM, which is designed to better support SmartCard style setups. Brian From Robert.Doolittle@Sun.COM Wed Oct 18 09:46:11 2006 Return-Path: X-Original-To: gdm-list@gnome.org Delivered-To: gdm-list@gnome.org Received: from localhost (localhost.localdomain [127.0.0.1]) by menubar.gnome.org (Postfix) with ESMTP id C64EB3B009C for ; Wed, 18 Oct 2006 09:46:11 -0400 (EDT) Received: from menubar.gnome.org ([127.0.0.1]) by localhost (menubar.gnome.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 17518-03 for ; Wed, 18 Oct 2006 09:46:07 -0400 (EDT) Received: from nwk-ea-fw-1.sun.com (nwk-ea-fw-1.sun.com [192.18.42.249]) by menubar.gnome.org (Postfix) with ESMTP id CE21C3B0077 for ; Wed, 18 Oct 2006 09:46:06 -0400 (EDT) Received: from d1-sfbay-09.sun.com ([192.18.39.119]) by nwk-ea-fw-1.sun.com (8.13.6+Sun/8.12.9) with ESMTP id k9IDk6ZK006911 for ; Wed, 18 Oct 2006 06:46:06 -0700 (PDT) Received: from conversion-daemon.d1-sfbay-09.sun.com by d1-sfbay-09.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) id <0J7C005013JYHI00@d1-sfbay-09.sun.com> (original mail from Robert.Doolittle@Sun.COM) for gdm-list@gnome.org; Wed, 18 Oct 2006 06:46:06 -0700 (PDT) Received: from [192.9.61.82] by d1-sfbay-09.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) with ESMTPSA id <0J7C00JJ73KTLJJJ@d1-sfbay-09.sun.com>; Wed, 18 Oct 2006 06:46:06 -0700 (PDT) Date: Wed, 18 Oct 2006 09:46:04 -0400 From: Bob Doolittle In-reply-to: <453568A0.80305@sun.com> Sender: Robert.Doolittle@Sun.COM To: Brian Cameron Message-id: <4536301C.4020701@Sun.COM> MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT References: <0BAEFFA7AFADFD4497F50DD093687E07130421@melmbxw01.prod.quest.corp> <453568A0.80305@sun.com> User-Agent: Thunderbird 1.5.0.7 (X11/20060915) X-Virus-Scanned: by amavisd-new at gnome.org X-Spam-Status: No, score=-2.445 tagged_above=-999 required=2 tests=[AWL=-0.078, BAYES_00=-2.599, TW_DM=0.077, TW_GD=0.077, TW_GT=0.077, UNPARSEABLE_RELAY=0.001] X-Spam-Score: -2.445 X-Spam-Level: Cc: gdm-list@gnome.org, Geoff Elgey Subject: Re: [gdm-list] GDM smartcard hack X-BeenThere: gdm-list@gnome.org X-Mailman-Version: 2.1.8 Precedence: list List-Id: GNOME Display Manager List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 18 Oct 2006 13:46:11 -0000 Brian Cameron wrote: >> [As an aside, even the smartcard only case still presents a "Username:" >> prompt under GDM, at least with all the themes I have tried. Is it >> possible to have a UI that only displays a prompt field when a PIN is >> required? That is, after card insertion has been recognized?] >> > > You probably need to hack the PAM module if you want a different label. > It'd be gross to change the prompt in the GDM GUI code, I'd think. > What PAM module is generating this label? Typically a username prompt is generated by a call to pam_get_user(). pam_get_user() will only generate the prompt if the PAM_USER item is unset. So, the way to avoid the prompt (assuming you know who the user is) is to set PAM_USER. If you intend to get the username off of the card after unlocking it, I suspect you could temporarily set PAM_USER to something bogus, then prompt for your PIN and do your authentication, unlock the card, retrieve the *real* username, and set PAM_USER to the correct value. It should be harmless to have PAM_USER set to some arbitrary junk temporarily within a PAM module, as long as it's set properly (or unset, if authentication fails) upon return from pam_authenticate(). And, it's been said many times on this list before - avoid doing *anything* special inside of GDM regarding smartcards. Don't you care about unlocking existing sessions with smartcards also? Typically you do, so it's best to put whatever event mechanisms you need in a separate daemon that can talk to your PAM module as necessary. Then you can leverage that daemon and your PAM module from other contexts such as screen savers. If you must do something within GDM, try to make it minimal so you have less to recreate when attempting to port the work to other contexts. -Bob >>> This PAM module (or a separate daemon or a GTK_MODULE loaded >>> into the GDM daemon) should be listening for SmartCard >>> insertion) and should shutdown and restart GDM with the new >>> PamStack configuration setting. >>> >> Interesting -- I need to learn more about GTK_MODULE, if it can be >> loaded in to the GDM daemon. >> > > Actually gdm-binary doesn't use GTK_MODULE since it doesn't normally > call gtk_main (unless it needs to pop up a GUI dialog after dropping > down to the gdm user). However, implementing a module structure > that works like GTK_MODULE for GDM would be the way to do this, I think. > Refer to the GTK+ documentation to learn about GTK_MODULE and how it > is implemented. > > Note that AddGtkModules and GtkModulesList in the GDM configuration > code only applies to the modules loaded for the GUI (gdmlogin, > gdmgreeter, gdmchooser, etc.). > > > Although shutdown and restart of GDM would > > be kinda ugly user experience, right? Blanking of the screen and > > bringing it all back up again? It would probably be easier to modify > > the PAM stack on the fly, and have GDM call pam_sm_authenticate() or > > even pam_start() again, although just what changes are made, and to > > which file, could prove tricky. > > The code you'ld probably want to modify is daemon/verify-pam.c, where > the logic for interacting with PAM is located. The hard part is > notifying GDM when it actually needs to do this, since it might already > be in the middle of a PAM interaction. Perhaps adding a gdmflexiserver > --command (look for GDM_SUP in gdm.[ch]) option would work well here. > I'd make it work so it requires authentication so that random users > cannot tell GDM to keep rebuilding the PAM stack. Or perhaps some > other mechanism? > > But tearing down and restarting might be a good way to get it to just > work in the short term, and then make it look pretty later. > > >> Currently I have a GDM configuration file setting that specifies the >> location of a "PAM prompt service". If the setting exists, then the >> service (shared library) is loaded dynamically when a PAM_PROMPT_ECHO_ON >> or PAM_PROMPT_ECHO_OFF message is handled. This service is started just >> before the gdm_slave_greeter_ctl (GDM_PROMPT, m) call and terminated >> when that call returns (or perhaps it is better to add this login where >> GDM_PROMPT is handled). In my previous post I just called this "start >> smartcard thread", but really it is just a service that basically >> provides another way to get an input from the prompt -- in this case, >> card insertion is detected and returns an empty username. The PAM module >> knows what do if it gets an empty username and it detects a card. >> Actually, this could be extended to other mechanisms such as >> fingerprint-readers, etc -- anything that can be made to emulate a >> response to a PAM_PROMPT_ECHO_ON or PAM_PROMPT_ECHO_OFF message, really. >> >> But if there's a GTK module that can do something similar, then I'll >> look into it. >> > > Yes, sounds reasonable. I'd recommend using something like a > GTK_MODULE. I think Ray Strode from RedHat is also working on some > SmartCard code that works using GTK_MODULE. So perhaps you and he might > want to trade emails and discuss, share code, or whatnot? > > He may respond to this thread, but if not, his email is: > > rstrode@redhat.com > > >> BTW what do you mean by "restart GDM with the new PamStack configuration >> setting"? Does PamStack mean the actual PAM stack (ie, the content of >> /etc/pam.d/gdm) or are you referring to something within GDM? You >> mention updating the GDM configuration file so I'm guessing the latter? >> I'm using GDM 2.6.05 at the moment (since I am targetting what gets >> shipped with RHEL4) and I don't see any "PamStack" in the code. >> Apologies if I have misunderstood the reason why the GDM configuration >> file should change. >> > > PamStack was added in 2.14.5. I'd recommend using this version (the > latest 2.16 release would be better) since it has code like this to > support things like SmartCard, dynamic PAM stack modification, etc. > > The value of security/PamStack is passed in as the 2nd argument > to the create_pamh call, so the name of the PAM module to use can be > configured in the GDM configuration files, starting with GDM > version 2.14.5. > > As I mentioned before, this value can be set per-display. Refer to > the GDM docs to see how to use per-display GDM configuration. > > http://www.gnome.org/projects/gdm/docs.html > > Brian > _______________________________________________ > gdm-list mailing list > gdm-list@gnome.org > http://mail.gnome.org/mailman/listinfo/gdm-list > From udovdh@xs4all.nl Fri Oct 27 10:17:58 2006 Return-Path: X-Original-To: gdm-list@gnome.org Delivered-To: gdm-list@gnome.org Received: from localhost (localhost.localdomain [127.0.0.1]) by menubar.gnome.org (Postfix) with ESMTP id 86A4A3B0094 for ; Fri, 27 Oct 2006 10:17:58 -0400 (EDT) Received: from menubar.gnome.org ([127.0.0.1]) by localhost (menubar.gnome.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 10367-09 for ; Fri, 27 Oct 2006 10:17:53 -0400 (EDT) Received: from smtp-vbr17.xs4all.nl (smtp-vbr17.xs4all.nl [194.109.24.37]) by menubar.gnome.org (Postfix) with ESMTP id DCBBA3B00AC for ; Fri, 27 Oct 2006 10:17:52 -0400 (EDT) Received: from [192.168.10.69] (pindarots.xs4all.nl [82.92.197.115]) (authenticated bits=0) by smtp-vbr17.xs4all.nl (8.13.8/8.13.8) with ESMTP id k9REHpa6032022 for ; Fri, 27 Oct 2006 16:17:51 +0200 (CEST) (envelope-from udovdh@xs4all.nl) Message-ID: <4542150E.7040504@xs4all.nl> Date: Fri, 27 Oct 2006 16:17:50 +0200 From: Udo van den Heuvel User-Agent: Thunderbird 1.5.0.7 (Windows/20060909) MIME-Version: 1.0 To: gdm-list@gnome.org X-Enigmail-Version: 0.94.0.0 OpenPGP: id=8300CC02 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit X-Virus-Scanned: by XS4ALL Virus Scanner X-Virus-Scanned: by amavisd-new at gnome.org X-Spam-Status: No, score=-0.108 tagged_above=-999 required=2 tests=[BAYES_40=-0.185, TW_GD=0.077] X-Spam-Score: -0.108 X-Spam-Level: Subject: [gdm-list] gdm and -ignoreABI for Xorg in Fedore Core 6 X-BeenThere: gdm-list@gnome.org X-Mailman-Version: 2.1.8 Precedence: list List-Id: GNOME Display Manager List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 27 Oct 2006 14:17:58 -0000 Hello, To get my Matrox G550 working with dual screens in Fedora Core 6 (with Xorg 7.1.1) I need to pass the -ignoreABI parameter to Xorg. When the machine boots by itself it automagically starts X and takes care of `building` the desktop I use. Where in the gdm configs can I tell Xorg to use the -ignoreABI parameter on the commandline? Thanks and kind regards, Udo From desrt@desrt.ca Fri Oct 27 10:39:18 2006 Return-Path: X-Original-To: gdm-list@gnome.org Delivered-To: gdm-list@gnome.org Received: from localhost (localhost.localdomain [127.0.0.1]) by menubar.gnome.org (Postfix) with ESMTP id CC6643B00B3 for ; Fri, 27 Oct 2006 10:39:18 -0400 (EDT) Received: from menubar.gnome.org ([127.0.0.1]) by localhost (menubar.gnome.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 12075-09 for ; Fri, 27 Oct 2006 10:39:12 -0400 (EDT) Received: from coriana6.cis.mcmaster.ca (coriana6.CIS.McMaster.CA [130.113.128.17]) by menubar.gnome.org (Postfix) with ESMTP id 06D543B0094 for ; Fri, 27 Oct 2006 10:39:12 -0400 (EDT) Received: from Gorash7.UTS.McMaster.CA (Gorash7.UTS.McMaster.CA [130.113.196.61]) by coriana6.cis.mcmaster.ca (8.13.7/8.13.7) with ESMTP id k9REd53x003360; Fri, 27 Oct 2006 10:39:10 -0400 (EDT) Received: from cgpsrv1.cis.mcmaster.ca (muss.CIS.McMaster.CA [130.113.64.9]) by Gorash7.UTS.McMaster.CA (8.13.7/8.13.7) with ESMTP id k9REc22B021854; Fri, 27 Oct 2006 10:38:02 -0400 Received: from gabriel.cas.mcmaster.ca ([130.113.70.96] verified) by cgpsrv1.cis.mcmaster.ca (CommuniGate Pro SMTP 4.1.8) with ESMTP-TLS id 104703211; Fri, 27 Oct 2006 10:38:34 -0400 From: Ryan Lortie To: Udo van den Heuvel In-Reply-To: <4542150E.7040504@xs4all.nl> References: <4542150E.7040504@xs4all.nl> Content-Type: text/plain Organization: McMaster University Date: Fri, 27 Oct 2006 10:36:46 -0400 Message-Id: <1161959806.9884.0.camel@localhost.localdomain> Mime-Version: 1.0 X-Mailer: Evolution 2.6.1 Content-Transfer-Encoding: 7bit X-PMX-Version-Mac: 4.7.1.128075, Antispam-Engine: 2.4.0.264935, Antispam-Data: 2006.10.27.63432 X-PerlMx-Spam: Gauge=IIIIIII, Probability=7%, Report='__CP_URI_IN_BODY 0, __CT 0, __CTE 0, __CT_TEXT_PLAIN 0, __HAS_MSGID 0, __HAS_X_MAILER 0, __MIME_TEXT_ONLY 0, __MIME_VERSION 0, __SANE_MSGID 0' X-Virus-Scanned: by amavisd-new at gnome.org X-Spam-Status: No, score=-2.539 tagged_above=-999 required=2 tests=[AWL=-0.017, BAYES_00=-2.599, TW_GD=0.077] X-Spam-Score: -2.539 X-Spam-Level: Cc: gdm-list@gnome.org Subject: Re: [gdm-list] gdm and -ignoreABI for Xorg in Fedore Core 6 X-BeenThere: gdm-list@gnome.org X-Mailman-Version: 2.1.8 Precedence: list List-Id: GNOME Display Manager List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 27 Oct 2006 14:39:19 -0000 Hi Udo In /etc/X11/gdm/gdm.conf you will find this section (or similar): ... [server-Standard] name=Standard server command=/usr/bin/X -br -audit 0 ... Just add -ignoreABI to the command= line. Cheers On Fri, 2006-27-10 at 16:17 +0200, Udo van den Heuvel wrote: > Hello, > > To get my Matrox G550 working with dual screens in Fedora Core 6 (with > Xorg 7.1.1) I need to pass the -ignoreABI parameter to Xorg. > When the machine boots by itself it automagically starts X and takes > care of `building` the desktop I use. > Where in the gdm configs can I tell Xorg to use the -ignoreABI parameter > on the commandline? > > Thanks and kind regards, > Udo > _______________________________________________ > gdm-list mailing list > gdm-list@gnome.org > http://mail.gnome.org/mailman/listinfo/gdm-list From udovdh@xs4all.nl Fri Oct 27 10:51:12 2006 Return-Path: X-Original-To: gdm-list@gnome.org Delivered-To: gdm-list@gnome.org Received: from localhost (localhost.localdomain [127.0.0.1]) by menubar.gnome.org (Postfix) with ESMTP id CE8183B00EA for ; Fri, 27 Oct 2006 10:51:12 -0400 (EDT) Received: from menubar.gnome.org ([127.0.0.1]) by localhost (menubar.gnome.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 13436-10 for ; Fri, 27 Oct 2006 10:51:07 -0400 (EDT) Received: from smtp-vbr12.xs4all.nl (smtp-vbr12.xs4all.nl [194.109.24.32]) by menubar.gnome.org (Postfix) with ESMTP id 9949A3B0130 for ; Fri, 27 Oct 2006 10:51:06 -0400 (EDT) Received: from [192.168.10.69] (pindarots.xs4all.nl [82.92.197.115]) (authenticated bits=0) by smtp-vbr12.xs4all.nl (8.13.8/8.13.8) with ESMTP id k9REp2Fs098272; Fri, 27 Oct 2006 16:51:03 +0200 (CEST) (envelope-from udovdh@xs4all.nl) Message-ID: <45421CD6.3050707@xs4all.nl> Date: Fri, 27 Oct 2006 16:51:02 +0200 From: Udo van den Heuvel User-Agent: Thunderbird 1.5.0.7 (Windows/20060909) MIME-Version: 1.0 To: gdm-list@gnome.org References: <4542150E.7040504@xs4all.nl> <1161959806.9884.0.camel@localhost.localdomain> In-Reply-To: <1161959806.9884.0.camel@localhost.localdomain> X-Enigmail-Version: 0.94.0.0 OpenPGP: id=8300CC02 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit X-Virus-Scanned: by XS4ALL Virus Scanner X-Virus-Scanned: by amavisd-new at gnome.org X-Spam-Status: No, score=-2.522 tagged_above=-999 required=2 tests=[BAYES_00=-2.599, TW_GD=0.077] X-Spam-Score: -2.522 X-Spam-Level: Subject: Re: [gdm-list] gdm and -ignoreABI for Xorg in Fedore Core 6 X-BeenThere: gdm-list@gnome.org X-Mailman-Version: 2.1.8 Precedence: list List-Id: GNOME Display Manager List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 27 Oct 2006 14:51:13 -0000 Hello Ryan, Thanks for the quick repy. Ryan Lortie wrote: > In /etc/X11/gdm/gdm.conf you will find this section (or similar): > > ... > [server-Standard] > name=Standard server > command=/usr/bin/X -br -audit 0 > ... > > Just add -ignoreABI to the command= line. I have no such file on my Fedora Core 6 system. Under /etc/gdm there is: ./XKeepsCrashing ./securitytokens.conf ./locale.alias ./custom.conf ./PostLogin ./PostLogin/Default.sample ./Init ./Init/Default ./PreSession ./PreSession/Default ./PostSession ./PostSession/Default ./modules ./modules/AccessKeyMouseEvents ./modules/factory-AccessDwellMouseEvents ./modules/factory-AccessKeyMouseEvents ./modules/AccessDwellMouseEvents ./Xsession custom.conf looks promising but my few tries did not give any effect. Any idea about what I should try next? Kind regards, Udo From desrt@desrt.ca Fri Oct 27 11:34:22 2006 Return-Path: X-Original-To: gdm-list@gnome.org Delivered-To: gdm-list@gnome.org Received: from localhost (localhost.localdomain [127.0.0.1]) by menubar.gnome.org (Postfix) with ESMTP id A59503B016E for ; Fri, 27 Oct 2006 11:34:22 -0400 (EDT) Received: from menubar.gnome.org ([127.0.0.1]) by localhost (menubar.gnome.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 18073-01 for ; Fri, 27 Oct 2006 11:34:16 -0400 (EDT) Received: from sigma957.cis.mcmaster.ca (sigma957.CIS.McMaster.CA [130.113.64.83]) by menubar.gnome.org (Postfix) with ESMTP id 313F73B00DE for ; Fri, 27 Oct 2006 11:34:16 -0400 (EDT) Received: from Gorash7.UTS.McMaster.CA (Gorash7.UTS.McMaster.CA [130.113.196.61]) by sigma957.cis.mcmaster.ca (8.13.7/8.13.7) with ESMTP id k9RFY8TY006056; Fri, 27 Oct 2006 11:34:15 -0400 (EDT) Received: from cgpsrv1.cis.mcmaster.ca (muss.CIS.McMaster.CA [130.113.64.9]) by Gorash7.UTS.McMaster.CA (8.13.7/8.13.7) with ESMTP id k9RFX29V024782; Fri, 27 Oct 2006 11:33:02 -0400 Received: from gabriel.cas.mcmaster.ca ([130.113.70.96] verified) by cgpsrv1.cis.mcmaster.ca (CommuniGate Pro SMTP 4.1.8) with ESMTP-TLS id 104708070; Fri, 27 Oct 2006 11:33:33 -0400 From: Ryan Lortie To: Udo van den Heuvel In-Reply-To: <45421CD6.3050707@xs4all.nl> References: <4542150E.7040504@xs4all.nl> <1161959806.9884.0.camel@localhost.localdomain> <45421CD6.3050707@xs4all.nl> Content-Type: text/plain Organization: McMaster University Date: Fri, 27 Oct 2006 11:31:45 -0400 Message-Id: <1161963105.10035.2.camel@localhost.localdomain> Mime-Version: 1.0 X-Mailer: Evolution 2.6.1 Content-Transfer-Encoding: 7bit X-PMX-Version-Mac: 4.7.1.128075, Antispam-Engine: 2.4.0.264935, Antispam-Data: 2006.10.27.73433 X-PerlMx-Spam: Gauge=IIIIIII, Probability=7%, Report='__CT 0, __CTE 0, __CT_TEXT_PLAIN 0, __HAS_MSGID 0, __HAS_X_MAILER 0, __MIME_TEXT_ONLY 0, __MIME_VERSION 0, __SANE_MSGID 0' X-Virus-Scanned: by amavisd-new at gnome.org X-Spam-Status: No, score=-2.536 tagged_above=-999 required=2 tests=[AWL=-0.014, BAYES_00=-2.599, TW_GD=0.077] X-Spam-Score: -2.536 X-Spam-Level: Cc: gdm-list@gnome.org Subject: Re: [gdm-list] gdm and -ignoreABI for Xorg in Fedore Core 6 X-BeenThere: gdm-list@gnome.org X-Mailman-Version: 2.1.8 Precedence: list List-Id: GNOME Display Manager List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 27 Oct 2006 15:34:22 -0000 Try this: grep -r '\[daemon\]' /etc This should find any gdm config file living in /etc. It may find some other things like gnome-vfs modules, but there should not be too much to sift through. If this doesn't work you might expand your search by looking in, for example, /usr/share and then in /usr. You could also 'locate gdm' and look for likely candidates among that list. One of these suggestions should allow you to find the file. Good luck :) On Fri, 2006-27-10 at 16:51 +0200, Udo van den Heuvel wrote: > Hello Ryan, > > Thanks for the quick repy. > > I have no such file on my Fedora Core 6 system. > > Any idea about what I should try next? From udovdh@xs4all.nl Fri Oct 27 11:47:46 2006 Return-Path: X-Original-To: gdm-list@gnome.org Delivered-To: gdm-list@gnome.org Received: from localhost (localhost.localdomain [127.0.0.1]) by menubar.gnome.org (Postfix) with ESMTP id 02EB83B0130 for ; Fri, 27 Oct 2006 11:47:46 -0400 (EDT) Received: from menubar.gnome.org ([127.0.0.1]) by localhost (menubar.gnome.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 18736-09 for ; Fri, 27 Oct 2006 11:47:42 -0400 (EDT) Received: from smtp-vbr11.xs4all.nl (smtp-vbr11.xs4all.nl [194.109.24.31]) by menubar.gnome.org (Postfix) with ESMTP id 4B4503B0240 for ; Fri, 27 Oct 2006 11:47:41 -0400 (EDT) Received: from [192.168.10.69] (pindarots.xs4all.nl [82.92.197.115]) (authenticated bits=0) by smtp-vbr11.xs4all.nl (8.13.8/8.13.8) with ESMTP id k9RFld6u035225 for ; Fri, 27 Oct 2006 17:47:40 +0200 (CEST) (envelope-from udovdh@xs4all.nl) Message-ID: <45422A1B.70309@xs4all.nl> Date: Fri, 27 Oct 2006 17:47:39 +0200 From: Udo van den Heuvel User-Agent: Thunderbird 1.5.0.7 (Windows/20060909) MIME-Version: 1.0 To: gdm-list@gnome.org References: <4542150E.7040504@xs4all.nl> <1161959806.9884.0.camel@localhost.localdomain> <45421CD6.3050707@xs4all.nl> <1161963105.10035.2.camel@localhost.localdomain> In-Reply-To: <1161963105.10035.2.camel@localhost.localdomain> X-Enigmail-Version: 0.94.0.0 OpenPGP: id=8300CC02 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit X-Virus-Scanned: by XS4ALL Virus Scanner X-Virus-Scanned: by amavisd-new at gnome.org X-Spam-Status: No, score=-2.522 tagged_above=-999 required=2 tests=[BAYES_00=-2.599, TW_GD=0.077] X-Spam-Score: -2.522 X-Spam-Level: Subject: Re: [gdm-list] gdm and -ignoreABI for Xorg in Fedore Core 6 X-BeenThere: gdm-list@gnome.org X-Mailman-Version: 2.1.8 Precedence: list List-Id: GNOME Display Manager List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 27 Oct 2006 15:47:46 -0000 Hello Ryan, Ryan Lortie wrote: > Try this: > > grep -r '\[daemon\]' /etc > > This should find any gdm config file living in /etc. It may find some > other things like gnome-vfs modules, but there should not be too much to > sift through. Only /etc/gdm has an empty [daemon] section. custom.conf has taken the place of gdm.conf I found while googlin'. But I fixed the gdm issue. I reinstalled an older Matrox driver that had no ABI issue (except for the HAL). Then I ran gdmsetup. Under Security -> Configure X Server... the Command can be edited. custom.conf now has at the bottom: [server-Standard] name=Standard server command=/usr/bin/Xorg -audit 0 -ignoreABI chooser=false handled=true flexible=true priority=0 With this entry the situation is like it was before the FC6 upgrade: one big desktop over two screens. Thanks for the responses! Udo From Brian.Cameron@Sun.COM Mon Oct 30 17:43:37 2006 Return-Path: X-Original-To: gdm-list@gnome.org Delivered-To: gdm-list@gnome.org Received: from localhost (localhost.localdomain [127.0.0.1]) by menubar.gnome.org (Postfix) with ESMTP id 9B4163B0135; Mon, 30 Oct 2006 17:43:37 -0500 (EST) Received: from menubar.gnome.org ([127.0.0.1]) by localhost (menubar.gnome.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 06116-02; Mon, 30 Oct 2006 17:43:31 -0500 (EST) Received: from brmea-mail-1.sun.com (brmea-mail-1.Sun.COM [192.18.98.31]) by menubar.gnome.org (Postfix) with ESMTP id 517883B013B; Mon, 30 Oct 2006 17:43:29 -0500 (EST) Received: from fe-amer-03.sun.com ([192.18.108.177]) by brmea-mail-1.sun.com (8.13.6+Sun/8.12.9) with ESMTP id k9UMhSIP017610; Mon, 30 Oct 2006 15:43:28 -0700 (MST) Received: from conversion-daemon.mail-amer.sun.com by mail-amer.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) id <0J7Z0050105VW700@mail-amer.sun.com> (original mail from Brian.Cameron@Sun.COM); Mon, 30 Oct 2006 15:43:28 -0700 (MST) Received: from [10.255.134.53] ([208.54.76.190]) by mail-amer.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) with ESMTPSA id <0J7Z0040L0GGJWZ2@mail-amer.sun.com>; Mon, 30 Oct 2006 15:43:28 -0700 (MST) Date: Mon, 30 Oct 2006 16:43:30 -0600 From: Brian Cameron Sender: Brian.Cameron@Sun.COM To: gnome-announce-list@gnome.org, gdm-list@gnome.org Message-id: <45468012.2090209@sun.com> MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT User-Agent: Thunderbird 2.0a1 (X11/20061011) X-Virus-Scanned: by amavisd-new at gnome.org X-Spam-Status: No, score=-2.076 tagged_above=-999 required=2 tests=[AWL=0.368, BAYES_00=-2.599, TW_GD=0.077, TW_PM=0.077, UNPARSEABLE_RELAY=0.001] X-Spam-Score: -2.076 X-Spam-Level: Subject: [gdm-list] GDM2 2.16.2 (stable), the "Combo" Release X-BeenThere: gdm-list@gnome.org X-Mailman-Version: 2.1.8 Precedence: list List-Id: GNOME Display Manager List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 30 Oct 2006 22:43:37 -0000 AOOH-GAH -------- (If you have no clue what GDM is, skip a few paragraphs down first) The 2.16.2 release is a stable release of GDM with the following new features: - Now support for "combo" style lists, and id values of "session" and "language" are supported for displaying the session/language lists as drop-down combos. (Brian Cameron). For example: - Now OK/Start Again buttons are sensitive/insensitive in a more sensible way for both gdmlogin and gdmgreeter (if GTK style buttons are used in gdmgreeter). (Brian Cameron) - Face Browser widget and background rectangle (for gdmgreeter) is not shown if there are no users to display. (Brian Cameron) - Help button now enabled in gdmphotosetup. (Matthias Clasen) - Fix so that if timed user script returns an invalid user that timed login is not turned on. (Andrew) - Fix bug that was causing %t to be expanded improperly when used in the timed login label. (Brian Cameron) - Set authdir to NULL after freeing to avoid accessing an invalid pointer. Fixes bug #359831. (Amnon Aaronsohn) - Leaks fixed. (Kjartan Maraas) - Translation updates (Abel Cheung, Priit Laes, Daniel Nylander) Note: GDM2 was originally written by Martin K. Petersen . Much work has been done on GDM2 by George Lebl, and Brian Cameron currently shares maintainership duties with the Queen of England. Note2: If installing from the tarball do note that make install overwrites most of the setup files, all except gdm.conf. It will however save backups with the .orig extension first. #ifndef GDM_DISABLE_DEPRECATED Note3: Note3 has been depracated ... #endif /* GDM_DISABLE_DEPRECATED */ Downloading: ============ Online Documentation - http://www.gnome.org/projects/gdm/ Latest Stable - http://ftp.gnome.org/pub/GNOME/sources/gdm/2.16/ Latest Unstable - http://ftp.gnome.org/pub/GNOME/sources/gdm/2.17/ No RPM this time around BTW. Have fun. A spec file is included though, so you can try: rpmbuild -ta gdm-whatever.tar.gz Have fun, Brian From Brian.Cameron@Sun.COM Mon Oct 30 17:45:39 2006 Return-Path: X-Original-To: gdm-list@gnome.org Delivered-To: gdm-list@gnome.org Received: from localhost (localhost.localdomain [127.0.0.1]) by menubar.gnome.org (Postfix) with ESMTP id 6811E3B00C9; Mon, 30 Oct 2006 17:45:39 -0500 (EST) Received: from menubar.gnome.org ([127.0.0.1]) by localhost (menubar.gnome.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 06116-05; Mon, 30 Oct 2006 17:45:35 -0500 (EST) Received: from brmea-mail-1.sun.com (brmea-mail-1.Sun.COM [192.18.98.31]) by menubar.gnome.org (Postfix) with ESMTP id 275193B007D; Mon, 30 Oct 2006 17:45:35 -0500 (EST) Received: from fe-amer-06.sun.com ([192.18.108.180]) by brmea-mail-1.sun.com (8.13.6+Sun/8.12.9) with ESMTP id k9UMjYwo021094; Mon, 30 Oct 2006 15:45:34 -0700 (MST) Received: from conversion-daemon.mail-amer.sun.com by mail-amer.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) id <0J7Z00E0102RS400@mail-amer.sun.com> (original mail from Brian.Cameron@Sun.COM); Mon, 30 Oct 2006 15:45:34 -0700 (MST) Received: from [10.255.134.53] ([208.54.76.190]) by mail-amer.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) with ESMTPSA id <0J7Z001RO0JXY5Q4@mail-amer.sun.com>; Mon, 30 Oct 2006 15:45:34 -0700 (MST) Date: Mon, 30 Oct 2006 16:45:35 -0600 From: Brian Cameron Sender: Brian.Cameron@Sun.COM To: gnome-announce-list@gnome.org, gdm-list@gnome.org Message-id: <4546808F.8050503@sun.com> MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT User-Agent: Thunderbird 2.0a1 (X11/20061011) X-Virus-Scanned: by amavisd-new at gnome.org X-Spam-Status: No, score=-2.09 tagged_above=-999 required=2 tests=[AWL=0.277, BAYES_00=-2.599, TW_DM=0.077, TW_GD=0.077, TW_PM=0.077, UNPARSEABLE_RELAY=0.001] X-Spam-Score: -2.09 X-Spam-Level: Subject: [gdm-list] GDM2 2.17.1 (unstable), the "Now Working" Release X-BeenThere: gdm-list@gnome.org X-Mailman-Version: 2.1.8 Precedence: list List-Id: GNOME Display Manager List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 30 Oct 2006 22:45:39 -0000 AOOH-GAH -------- (If you have no clue what gdm is, skip a few paragraphs down first) The 2.17.1 release is an unstable release of GDM with the following new features. I wanted to do another release since 2.17.0 was crashing out-of-the-box due to the first issue listed below. Also this release has some really nice new usability improvements and custom command support. Read below... - No longer crash if at-spi-registryd cannot be started. (Ariel Rios) - Now support customcommands in GDM configuration so that sysadmins can specify custom commands to appear in the GDM GUI (in addition to reboot/shutdown/etc.). Refer to the comments in the GDM configuration file and documentation for details. Also support new QUERY_CUSTOM_CMD_LABELS and QUERY_CUSTOM_CMD_NO_RESTART_STATUS gdmflexiserver commands. (Lukasz Zalewski) - Now support for "combo" style lists, and id values of "session" and "language" are supported for displaying the session/language lists as drop-down combos. (Brian Cameron). For example: - Now OK/Start Again buttons are sensitive/insensitive in a more sensible way for both gdmlogin and gdmgreeter (if GTK style buttons are used in gdmgreeter). (Brian Cameron) - Face Browser widget and background rectangle (for gdmgreeter) is not shown if there are no users to display. (Brian Cameron) - Help button now enabled in gdmphotosetup. (Matthias Clasen) - Fix so that if timed user script returns an invalid user that timed login is not turned on. (Andrew) - Fix bug that was causing %t to be expanded improperly when used in the timed login label. (Brian Cameron) - Set authdir to NULL after freeing to avoid accessing an invalid pointer. Fixes bug #359831. (Amnon Aaronsohn) - Introduce altfile[n] property to cater for alternative image file definition in gdmgreeter themes. (Erwann Chenede) - Leaks fixed. (Kjartan Maraas) - Documentation improvements. (Malcolm Parsons) - Build improvements. (Brian Cameron) - Translation updates (Dwayne Bailey, Luca Ferretti, Satoru SATOH, Jens Seidel, Ilkka Tuohela) Note: GDM2 was originally written by Martin K. Petersen . Much work has been done on GDM2 by George Lebl, and Brian Cameron currently shares maintainership duties with the Queen of England. Note2: If installing from the tarball do note that make install overwrites most of the setup files, all except gdm.conf. It will however save backups with the .orig extension first. #ifndef GDM_DISABLE_DEPRECATED Note3: Note3 has been depracated ... #endif /* GDM_DISABLE_DEPRECATED */ Downloading: ============ Online Documentation - http://www.gnome.org/projects/gdm/ Latest Stable - http://ftp.gnome.org/pub/GNOME/sources/gdm/2.16/ Latest Unstable - http://ftp.gnome.org/pub/GNOME/sources/gdm/2.17/ No RPM this time around BTW. Have fun. A spec file is included though, so you can try: rpmbuild -ta gdm-whatever.tar.gz Have fun, Brian