Re: shadow 4.0.8 and it's etc/login.defs.linux

On Mon, 25 Apr 2005, Kyle Sallee wrote:

> I knowticed the manual page for login.defs says:
>     "Much of the functionality that used to be provided by the shadow  pass-
>      word  suite  is  now handled by PAM."
>
> su and login now report:
>
> configuration error - unknown item 'FAIL_DELAY' (notify administrator)
> configuration error - unknown item 'FAILLOG_ENAB' (notify administrator)
> configuration error - unknown item 'LASTLOG_ENAB' (notify administrator)
> configuration error - unknown item 'MAIL_CHECK_ENAB' (notify administrator)
> configuration error - unknown item 'OBSCURE_CHECKS_ENAB' (notify administrator)
> configuration error - unknown item 'PORTTIME_CHECKS_ENAB' (notify administrator)
> configuration error - unknown item 'QUOTAS_ENAB' (notify administrator)
> configuration error - unknown item 'MOTD_FILE' (notify administrator)
> configuration error - unknown item 'FTMP_FILE' (notify administrator)
> configuration error - unknown item 'NOLOGINS_FILE' (notify administrator)
> configuration error - unknown item 'MAIL_DIR' (notify administrator)
> configuration error - unknown item 'ENV_HZ' (notify administrator)
> configuration error - unknown item 'ENV_SUPATH' (notify administrator)
> configuration error - unknown item 'ENV_PATH' (notify administrator)
> configuration error - unknown item 'PASS_MAX_DAYS' (notify administrator)
> configuration error - unknown item 'PASS_MIN_DAYS' (notify administrator)
> configuration error - unknown item 'PASS_MIN_LEN' (notify administrator)
> configuration error - unknown item 'PASS_WARN_AGE' (notify administrator)
> configuration error - unknown item 'SU_WHEEL_ONLY' (notify administrator)
> configuration error - unknown item 'CRACKLIB_DICTPATH' (notify administrator)
> configuration error - unknown item 'PASS_CHANGE_TRIES' (notify administrator)
> configuration error - unknown item 'PASS_ALWAYS_WARN' (notify administrator)
> configuration error - unknown item 'CHFN_AUTH' (notify administrator)
> configuration error - unknown item 'DEFAULT_HOME' (notify administrator)
> configuration error - unknown item 'ENVIRON_FILE' (notify administrator)
> configuration error - unknown item 'ENV_TZ' (notify administrator)
> configuration error - unknown item 'ENV_HZ' (notify administrator)
> Password:
> configuration error - unknown item 'ENV_SUPATH' (notify administrator)
> configuration error - unknown item 'ENV_SUPATH' (notify administrator)
> configuration error - unknown item 'QMAIL_DIR' (notify administrator)
> configuration error - unknown item 'MAIL_DIR' (notify administrator)
> configuration error - unknown item 'MAIL_FILE' (notify administrator)
>
> login also gives those configuration errors.

And this is correct. This varables are now disabled if shadow is 
configured with PAM support enabled because all code managed by abowe 
variables are disabled in this case. Handle faillog it is task for 
pam_tally. Setting enviroment variables it is pam_env. Display mail 
notitications it is task for pam_mail .. etc.

> Perhaps those lines should be removed from /etc/login.defs?

Yes .. in case when PAM support was enabled.

> Should they not already be removed from the default
> configuration files etc/login.defs.linux in the shadow 4.0.8 tarball, please?

Better .. this file must be generated depending on disable/enable PAM 
support on autoconf level.

In longer time I want move as amny as possible variables from 
/etc/login.defs to /etc/default/<program> (best will be IMO completly 
remove handle /etc/login.defs).
Now some programs uses two configuration files and APIs (like useradd one 
for /etc/login.defs and second for handle /etc/default/useradd). I want 
repalce this by one (common for handle /etc/default/<program>).

kloczek
-- 
-----------------------------------------------------------
*Ludzie nie majÂą problemĂłw, tylko sobie sami je stwarzajÂą*
-----------------------------------------------------------
Tomasz KÂłoczko, sys adm @zie.pg.gda.pl|*e-mail: [email protected]*