Re: [gdm-list] [system-tools] Allowing password-less connexions

["Dan Nicholson" <dbn lists gmail com>]

On Tue, May 13, 2008 at 2:00 PM, Milan Bouchet-Valat <nalimilan club fr> wrote:
> Le lundi 12 mai 2008 à 18:51 +0200, Carlos Garnacho a écrit :
>
> > Couldn't this be set through a group so that all users in that group
>  > wouldn't need their passwords? users-admin already has code/ui towards
>  > showing certain groups as a privilege the user can acquire, it would
>  > make sense to me having this included there, and the changes in
>  > users-admin would be really trivial too.
>  Good idea, but I don't know whether PAM provides a module that would
>  allow being member of a specific group to be "sufficient" to
>  authenticate. I'm going to search for such a module, but if somebody
>  knows about it...

See pam_succeed_if(8). I think you probably want something like:

auth sufficient pam_succeed_if.so user ingroup <group>

--
Dan