On Wed, 2015-01-14 at 13:34 +0100, Pavel Reichl wrote:
On 01/13/2015 08:39 PM, Stephen Gallagher wrote:
>
>
> On Tue, 2015-01-13 at 18:58 +0100, Pavel Reichl wrote:
>> Hello,
>>
>> please see simple patch attached.
>>
>> Thanks!
>
> Nack.
>
> First, what exactly is this service doing? I don't think we would want
> to map it to ServiceLogonRight. That's intended for granting access to
> the machine from a service (as opposed to a human user).
>
> Looking at it, this PAM stack (systemd-user) is called whenever the
> system invokes starts a session instance of systemd. It seems to me,
> this really belongs added to the list of default options for
> ad_gpo_map_permit to always allow access (since this has to be allowed
> for system functionality to work properly).
>
> Also, please update the manpages to match, since they specifically list
> all of the default values.
Thanks for comments, updated patch attached.
Ack