Re: shutdown prompt question

[Owen Taylor <otaylor redhat com>]

"Dave S" <dsmithye@hotmail.com> writes:

> >From: Owen Taylor <otaylor@redhat.com>
> >To: Havoc Pennington <hp@redhat.com>
> >CC: "Dave S" <dsmithye@hotmail.com>, gnome-list@gnome.org
> >Subject: Re: shutdown prompt question
> >Date: 05 Feb 2000 12:06:46 -0500
> >
> >
> >Havoc Pennington <hp@redhat.com> writes:
> >
> > > "Dave S" <dsmithye@hotmail.com> writes:
> > > > Is there another option somewhere else i'm missing?
> > > >
> > >
> > > You need to fool around with PAM (assuming you're running Red Hat or
> > > a distribution based on it because GNOME doesn't show the halt/reboot
> > > otherwise I don't think).  Look in /etc/pam.d/reboot and
> > > /etc/pam.d/shutdown for the config files, and /usr/doc/pam-0.68/html/
> > > for documentation (if you don't have the docs you may need a newer pam
> > > package).
> > >
> > > Looking at it quickly I don't actually see a way to disable the
> > > passwords for console users [...]
> >
> >Simply comment out the line in /etc/pam.d/{shutdown,halt,reboot}
> >
> ># auth    required      /lib/security/pam_pwdb.so
> >
> >Regards,
> >                                         Owen
> >
> >
> 
> 
> Actually, commenting out the line doesn't work.
> If you comment it out, when i select halt or reboot, i'm simply immediately 
> kicked back to the login screen.
> So what i did was un-comment the lines and change the "required" to 
> "sufficient" and now that seems to work.

This really doesn't make any sense to me:

 - I actually have the setup I described on one of my machines and
   it works fine. 

 - If you have 'auth sufficient /lib/security/pam_pwdb.so', then
   it will ask you for the password, since 'suffient' means 
   'if the module succeeds, no more modules of this type will
    be checked and still causes the module to be executed. 

Are you sure that you are editing the 'shutdown' configuration file
(not halt or reboot) *- that is the one that gsm activates from the
shutdown screen?

Note that you also must have at least one auth module - if you
commented out both pam_console and pam_pwdb, then you would
have to add in pam_permit - which would allow any user at all
to shut down the system, whether they were logged in at the
console or not. (Or you could use pam_listfile to restrict things
to a particular list of users.)

> However, only one odditiy - when i shutdown as root, every shuts down fine 
> and then i don't have to press my power off button - it automatically shuts 
> it down.
> When i shutdown (ie. logout->halt) as a regular user, all the processes 
> shutdown okay, but then it just sits at the screen with the last message 
> saying "Power down" and i must then do it manually.
> Not a big deal, but is there something i can do to make it shut the power 
> off for regular user hree too?

No clue about this. Works for me. (tm).

Regards,
                                        Owen