Skip to contentSkip to conversation

Fix passwordless logins with pam enabled

PATCH New Paul Eggleton 1 participant 2 messages Mar 21, 2014

lore
Share & tools
lore
#0 lore raw

cover Fix passwordless logins with pam enabled

The following change since commit eb53ae4a5702dbd65b6e340bbd3ae4566157c081:

gnome-doc-utils: removed gconf inheritance (2014-03-21 12:05:33 +0000)

is available in the git repository at:

git://git.openembedded.org/openembedded-core-contrib paule/pam-nullok
http://cgit.openembedded.org/cgit.cgi/openembedded-core-contrib/log/?h=paule/pam-nullok

Paul Eggleton (1):
classes/image: disable pam nullok_secure with debug-tweaks

 meta/classes/image.bbclass | 4 ++++
 1 file changed, 4 insertions(+)
Signature · 1 line
1.8.5.3
#1 lore raw

PATCH 1/1 classes/image: disable pam nullok_secure with debug-tweaks

If you want passwordless logins to work with pam enabled, then you can't have "nullok_secure" enabled on pam_unix entries. Add some postprocessing to change these to "nullok" when debug-tweaks is in IMAGE_FEATURES, in order to make passwordless logins with PAM work again.

Fixes [YOCTO #5973].

---
 meta/classes/image.bbclass | 4 ++++
 1 file changed, 4 insertions(+)
meta/classes/image.bbclass +4 -0
index 9a04288..3436624 100644
@@ -298,6 +298,10 @@ ssh_allow_empty_password () {
 			printf '\nDROPBEAR_EXTRA_ARGS="-B"\n' >> ${IMAGE_ROOTFS}${sysconfdir}/default/dropbear
 		fi
 	fi
+
+	if [ -d ${IMAGE_ROOTFS}${sysconfdir}/pam.d ] ; then
+		sed -i 's/nullok_secure/nullok/' ${IMAGE_ROOTFS}${sysconfdir}/pam.d/*
+	fi
 }
 
 # Enable postinst logging if debug-tweaks is enabled
Signature · 1 line
1.8.5.3