Bug 37129 – univention-pam is not installed until the system is configured by univention-system-setup

Bug 37129 - univention-pam is not installed until the system is configured by univention-system-setup


Summary:	univention-pam is not installed until the system is configured by univention-...

Status:	CLOSED FIXED

Product:	UCS
Classification:	Unclassified
Component:	System setup
Version:	UCS 4.0
Hardware:	Other Linux

Importance:	P5 normal (vote)
Target Milestone:	UCS 4.0-1-errata
Assigned To:	Erik Damrose
QA Contact:	Felix Botner

URL:
Keywords:

Duplicates:	37753 (view as bug list)
Depends on:
Blocks:	36971
	Show dependency tree / graph

Reported:	2014-12-01 13:56 CET by Sönke Schwardt-Krummrich
Modified:	2015-03-25 16:44 CET (History)
CC List:	4 users (show)

See Also:
What kind of report is it?:	---
What type of bug is this?:	---
Who will be affected by this bug?:	---
How will those affected feel about the bug?:	---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Sönke Schwardt-Krummrich

2014-12-01 13:56:34 CET

univention-pam is not installed until the system is configured by 
univention-system-setup. This affects the installation DVD and the EC2 instances.

Because of this the special message of the day (motd.setup) for appliance mode is not shown during login on console or via ssh.

Comment 1 Philipp Hahn

2014-12-03 10:09:40 CET

As univention-pam is quiet LDAP dependent and univention-system-setup-boot should also be able to setup a base system without LDAP, always installing univention-pam just to get pam_motd.so used might not be so good.
Also consider all the cases where login might fail because of not yet configured/running LDAP.

Comment 2 Erik Damrose

2015-02-25 09:33:30 CET

*** Bug 37753 has been marked as a duplicate of this bug. ***

Comment 3 Erik Damrose

2015-03-09 09:47:15 CET

A pam-config module has been added. It is configured for /etc/pam.d/common-session and provides the same functionality as the UCR template 20system-setup-login-message: Show /etc/motd.setup

Upon installing univention-pam, the base UCR template for /etc/pam.d/common-session is installed and takes over. As univention-system-setup-boot is uninstalled when completing the system-setup process, no remnants of the pam-config file should remain on a joined system.

r58726 univention-system-setup 8.1.66-23.850.201503090924
r58729 2015-03-09-univention-system-setup.yaml

Comment 4 Felix Botner

2015-03-13 15:30:52 CET

OK - 2015-03-09-univention-system-setup.yaml

OK - UCS 4.0-1 appliance + errata update
OK - appliance motd normal
OK - appliance motd amazon

OK - after setup, normal /etc/issue

Comment 5 Janek Walkenhorst

2015-03-25 16:44:13 CET

<http://errata.univention.de/ucs/4.0/116.html>