From mboxrd@z Thu Jan 1 00:00:00 1970 From: Leo Famulari Subject: Re: [PATCH 2/3] gnu: pam_unix.so Add use_first_pass option. Date: Sun, 23 Oct 2016 17:45:50 -0400 Message-ID: <20161023214550.GD6318@jasmine> References: <1477150080-17187-1-git-send-email-jmd@gnu.org> <1477150080-17187-2-git-send-email-jmd@gnu.org> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:36756) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1byQaa-0006d6-L6 for guix-devel@gnu.org; Sun, 23 Oct 2016 17:45:57 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1byQaV-0007lg-Pb for guix-devel@gnu.org; Sun, 23 Oct 2016 17:45:56 -0400 Content-Disposition: inline In-Reply-To: <1477150080-17187-2-git-send-email-jmd@gnu.org> List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: "Guix-devel" To: John Darrington Cc: guix-devel@gnu.org On Sat, Oct 22, 2016 at 05:27:59PM +0200, John Darrington wrote: > * gnu/system/pam.scm (unix-pam-service) [auth]: Add "use_first_pass" option. > --- > gnu/system/pam.scm | 2 +- > 1 file changed, 1 insertion(+), 1 deletion(-) > > diff --git a/gnu/system/pam.scm b/gnu/system/pam.scm > index 4546c1a..0278db6 100644 > --- a/gnu/system/pam.scm > +++ b/gnu/system/pam.scm > @@ -217,7 +217,7 @@ should be a file-like object used as the message-of-the-day." > (pam-entry > (control "required") > (module "pam_unix.so") > - (arguments '("nullok"))) > + (arguments '("nullok" "use_first_pass"))) pam_unix(8) says: use_first_pass The argument use_first_pass forces the module to use a previous stacked modules password and will never prompt the user - if no password is available or the password is not appropriate, the user will be denied access. I don't understand exactly what this means for GuixSD. Can you explain it to us? :)