Bug 32517 – add group restrictions to PAM (for ssh, lightdm)

Bug 32517 - add group restrictions to PAM (for ssh, lightdm)


Summary:	add group restrictions to PAM (for ssh, lightdm)

Status:	CLOSED WONTFIX

Product:	Z_Univention Corporate Client (UCC)
Classification:	Unclassified
Component:	User logins
Version:	unspecified
Hardware:	Other Linux

Importance:	P5 enhancement
Target Milestone:	UCC 2.x
Assigned To:	UCC maintainers
QA Contact:

URL:
Keywords:

Duplicates:	31087 (view as bug list)
Depends on:
Blocks:
	Show dependency tree / graph

Reported:	2013-09-06 14:30 CEST by Ingo Steuwer
Modified:	2023-06-28 10:32 CEST (History)
CC List:	7 users (show)

See Also:
What kind of report is it?:	---
What type of bug is this?:	---
Who will be affected by this bug?:	---
How will those affected feel about the bug?:	---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Ingo Steuwer

2013-09-06 14:30:05 CEST

UCS supports individual PAM configurations for services like ssh or the login manager, where one can define groups that allowed to login.

We should provide this feature for UCC also, for example to:

- define who is allowed to connect to UCC thin clients by ssh
- define who is allowed to login on a local lightdm on UCC Terminal Servers

Comment 1 Moritz Muehlenhoff

2014-03-27 09:00:01 CET

This can be considered if sufficient time if left

Comment 2 Moritz Muehlenhoff

2014-06-02 11:42:00 CEST

This was targetted at 2.0-errata to potentially address it during 2.0 development, but it didn't make the cut so moving back to 2.x

Comment 3 Moritz Muehlenhoff

2014-06-02 13:49:27 CEST

*** Bug 31087 has been marked as a duplicate of this bug. ***

Comment 4 Michael Grandjean

2014-09-30 21:14:54 CEST

Restricting the login to certain groups/users was also requested in a workshop.

Comment 5 Tim Petersen

2014-11-18 07:49:01 CET

Requested at 2014110421000415

Comment 6 Philipp Hahn

2023-06-28 10:30:25 CEST

UCC is EoL