For those trying to implement login banners and have disabled the user-list feature, I've run in to a couple of issues.

 

1)  With disable-user-list set, once the screen blanks the user is double prompted for a username to login.  The first username prompt is ignored and will accept any text.

 

Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=1157259

 

2) With disable-user-list set and a banner set, once the screen blanks the banner is lost upon waking the screen.

 

Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=1157266

 

The only workaround I've found thus far is to disable session idle for GDM.  The unfortunate side effect is the screen never blanks or turns off.

 

echo -e "[org/gnome/desktop/session]\nidle-delay=uint32 0" > /etc/dconf/db/gdm.d/00-fixgdm
echo "/org/gnome/desktop/session/idle-delay" > /etc/dconf/db/gdm.d/locks/00-fixgdm-locks
dconf update

 

-Nick

 

P.s. if you've already locked down your umask, verify all files are mode 0644, including /etc/dconf/db/gdm.

 

--

Nicholas P. Crawford

Senior UNIX Systems Administrator

contractor, General Dynamics Information Technology

NVESD Network Services Branch, US Army

email: Nicholas.Crawford@gdit.com

comm: (703) 704-2299 dsn: (312) 654-2299

cell: (571) 225-1283