Control: retitle -1 Double clicks not recognized in Qt(4?/5?) applications Control: reassign -1 x2goclient 4.1.0.0 Control: tag -1 build-win32
On 09/05/2017 10:42 AM, Bruno CAPELETO wrote:
Found : in sshd_config, one must use the "UsePAM yes" directive
I do not really see the link with the locales, and on top of that that open some security holes I guess. For example, adding this instruction I had to add additional instructions to forbid the password authentication.
PAM authentication is generally good - it also provides stuff like sessions and other access control (for instance with login limits and the like), which pure shadow access does not.
Okay, so what happens is that without PAM support, your shell startup scripts that would normally fetch the system locale are probably not executed. Which one exactly beats me, but that's probably not too important. You really shouldn't disable PAM authentication on Linux.
Instead, you can edit /etc/pam.d/sshd. Disable the common-auth include line. That should make it impossible to login with passwords - but still allow setups with OTP's for instance, if ChallengeResponseAuthentication is enabled in sshd_config.
Conclusions for the reported bugs :
- locales are set properly
Great!
- I do not have the LXDE error "no session for pid..." anylonger
Also good, but that's been LXDE's problem really.
- single app mode seems to work for my software (no crash so far)
Even better. It might look bad in single application mode, as explained before.
- I could not test right now ; I guess that one is related to something else...
Let's assume that still to be the case, though. I'm retitling the bug report as such and will leave it open for the time being.
Mihai