On Wed, Apr 07, 2004 at 11:30:16PM +0200, Kees van Vloten wrote: > Package: kdm > Version: 4:3.1.5-2 > Severity: normal > > KDM allows multiple logins although pam_limits is listed in > /etc/pam.d/kdm: > @include common-auth > @include common-account > @include common-password > @include common-session > > auth required pam_nologin.so > auth required pam_env.so > session required pam_limits.so debug > > and the user I try is specifically not allowed to do multiple logins > with this line in /etc/security/limits.conf: > kvv - maxlogins 1 > > At login the follwoing messages are added to /var/log/auth.log: > Apr 7 23:24:45 vivaldi kdm[15655]: (pam_unix) session opened for user > kvv by (uid=0) > Apr 7 23:24:45 vivaldi pam_limits[15655]: reading settings from > '/etc/security/limits.conf' > Apr 7 23:24:45 vivaldi pam_limits[15655]: process_limit: processing - > maxlogins 1 for USER > Apr 7 23:24:45 vivaldi pam_limits[15655]: checking logins for 'kvv' > (maximum of 1) > Apr 7 23:24:45 vivaldi pam_limits[15655]: Too many logins (max 1) for > kvv > > Even though these messages indicate that I am not allowed to login, KDE > starts initialising and logs me in. This sounds like there is something wrong with the pam setup not kdm directly, shouldn't pam be rejecting the login? Maybe it needs pam_limits set on more than just session. I don't really know much about how pam works. Chris
Attachment:
signature.asc
Description: Digital signature