Re: About the option CLOSE_SESSIONS.

On Wed, 10 Aug 2005, Stef Bon wrote:

> Hello,
>
> I'm working with a module pam_script, which executes a script at login and
> logout.
>
> Very important - when logging out with the "login" command from the shadow
> package, is the option "CLOSE_SESSIONS". If omitted (or set to "no") no
> module will be executed/processed when a session is closed. I think this
> options should be included in login.defs.linux.
>
> At this moment this option is not in the login.defs and thus the default is
> used, which is "no".

And this next evidence incorrectnes some of the oldest part of shadow 
code.

I'm not PAM specialist but for me after lecture PAM documentation using 
login.defs::CLOSE_SESSIONS varable is incorrect because IMO PAM sessiom 
must allways closed. For remove handle login.defs::CLOSE_SESSIONS and 
rewrite login and newgrp for use allways behavior like 
login.defs::CLOSE_SESSIONS=yes stops me only lack of opinion someone who 
have better knowledge level than mine (about using PAM API).

Coments (?)

kloczek
-- 
-----------------------------------------------------------
*Ludzie nie majÂą problemĂłw, tylko sobie sami je stwarzajÂą*
-----------------------------------------------------------
Tomasz KÂłoczko, sys adm @zie.pg.gda.pl|*e-mail: [email protected]*