[Bug 624715] Re: pam_group is not idempotent

[jwm]

I've had a look at consolekit and can't figure out how to use it to do
*anything* let alone substitute for pam_groups. The freedesktop.org
webpage is basically it, and all it consists of is an aspirational
introduction written in architecture astronaut speak, and a DBus API
guide.

Unless I'm missing some sort of super secret /etc/security/* to
consolekit migration guide.

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to pam in Ubuntu.
https://bugs.launchpad.net/bugs/624715

Title:
  pam_group is not idempotent

Status in “pam” package in Ubuntu:
  Triaged

Bug description:
  If pam_group appears twice in various pam.d files (eg added to common-
  auth and still present in login), it will add the user to those groups
  a second time.

  Actually, the extent of the problem is worse than that ­— if the user
  is already a member of a group, they're still added a second time,
  indicating that no checking is done at all!

  This is definitely a pain when using NFSv3, as it has a limit of 16
  supplementary groups.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/pam/+bug/624715/+subscriptions