01:30 | book` has left IRC (book`!~book`@static.38.6.217.95.clients.your-server.de, Quit: Leaving) | |
01:38 | book` has joined IRC (book`!~book`@static.38.6.217.95.clients.your-server.de) | |
02:20 | ogra has left IRC (ogra!~ogra_@ubuntu/member/ogra, Ping timeout: 244 seconds) | |
04:08 | quinox has left IRC (quinox!~quinox@ghost.qtea.nl, Quit: WeeChat 2.4) | |
04:11 | quinox has joined IRC (quinox!~quinox@ghost.qtea.nl) | |
04:31 | bengoa has left IRC (bengoa!~alberto@194.50.55.200, Ping timeout: 244 seconds) | |
04:38 | bengoa has joined IRC (bengoa!~alberto@194.50.55.200) | |
05:04 | alkisg has left IRC (alkisg!~alkisg@ubuntu/member/alkisg, Ping timeout: 272 seconds) | |
05:08 | spaced0ut has left IRC (spaced0ut!~spaced0ut@unaffiliated/spaced0ut, Ping timeout: 248 seconds) | |
05:22 | ricotz has joined IRC (ricotz!~ricotz@ubuntu/member/ricotz) | |
05:25 | kjackal has joined IRC (kjackal!~quassel@2a02:587:311b:3d00:1020:c4a3:e998:75ee) | |
06:02 | woernie has joined IRC (woernie!~werner@p5B29636A.dip0.t-ipconnect.de) | |
06:16 | ZAJDAN has left IRC (ZAJDAN!~zdenek@77.48.149.75, Quit: Konversation terminated!) | |
06:16 | ZAJDAN has joined IRC (ZAJDAN!~zdenek@77.48.149.75) | |
06:28 | woernie has left IRC (woernie!~werner@p5B29636A.dip0.t-ipconnect.de, Remote host closed the connection) | |
06:31 | stellasolitaria has joined IRC (stellasolitaria!~jhonny5@159.213.93.166) | |
07:02 | alkisg has joined IRC (alkisg!~alkisg@ubuntu/member/alkisg) | |
07:56 | statler has joined IRC (statler!~Georg@gwrz3.lohn24.de) | |
08:00 | stellasolitaria has left IRC (stellasolitaria!~jhonny5@159.213.93.166, Ping timeout: 244 seconds) | |
09:40 | ogra_ has joined IRC (ogra_!~ogra_@p5098ed03.dip0.t-ipconnect.de) | |
10:36 | stellasolitaria has joined IRC (stellasolitaria!~jhonny5@159.213.93.166) | |
10:37 | ogra_ has left IRC (ogra_!~ogra_@p5098ed03.dip0.t-ipconnect.de) | |
10:37 | ogra has joined IRC (ogra!~ogra_@ubuntu/member/ogra) | |
11:07 | stellasolitaria has left IRC (stellasolitaria!~jhonny5@159.213.93.166, Ping timeout: 246 seconds) | |
11:57 | Faith has joined IRC (Faith!~Paty_@unaffiliated/faith) | |
12:15 | mgariepy has joined IRC (mgariepy!~mgariepy@ubuntu/member/mgariepy) | |
13:59 | spaced0ut has joined IRC (spaced0ut!~spaced0ut@unaffiliated/spaced0ut) | |
15:56 | vagrantc has joined IRC (vagrantc!~vagrant@unaffiliated/vagrantc) | |
17:09 | statler has left IRC (statler!~Georg@gwrz3.lohn24.de, Remote host closed the connection) | |
18:45 | <alkisg> vagrantc: ok since you don't like the "pamltsp" pseudohash, for now I think I'm going to assume "if the user is not a system user and doesn't have a password hash, i.e. hash length < 10, try ssh auth"
| |
18:45 | So, pwmerge will delete the hash of imported users and that will mean they're pamltsp users; and the sysadmin may tag a user as pamltsp by running `passwd -d user; passwd -l user` (delete and lock, i.e. put "!" as the hash)
| |
18:45 | Does that sound better?
| |
18:53 | pamltsp will also prevent the user from locally changing his password in any case (so he won't be able to accidentally run `passwd`and set a password and that way untag himself),
| |
19:04 | <vagrantc> so, local users will have a password hash, and won't get authentication, and pamltsp users will not have a hash ...
| |
19:05 | er, wont try pamltsp authentication ...
| |
19:05 | <alkisg> Hrm no, this won't work, as some tools or DMs won't even show those users
| |
19:05 | Bad idea; I knew I had turn it down a couple of days ago for a reason :D
| |
19:05 | Meh back to the original "pamltsp" hash, which works everywhere!
| |
19:05 | And we'll see if it ever causes any issues
| |
19:06 | <vagrantc> DMs only show users with a password? how does that work with ldap?
| |
19:06 | <alkisg> They don't see the password in shadow
| |
19:07 | With pamltsp, they'll be able to see a "locked password"; and it's correct that they'd disable the user
| |
19:07 | <vagrantc> or is this for the "show an icon for the user" vs. username/password entry box?
| |
19:07 | <alkisg> E.g. mate-users-admin shows "account disable; want to enable it?"
| |
19:07 | <vagrantc> right
| |
19:36 | ricotz has left IRC (ricotz!~ricotz@ubuntu/member/ricotz, Quit: Leaving) | |
20:53 | Faith has left IRC (Faith!~Paty_@unaffiliated/faith, Quit: Leaving) | |
21:48 | kjackal has left IRC (kjackal!~quassel@2a02:587:311b:3d00:1020:c4a3:e998:75ee, Ping timeout: 252 seconds) | |
23:38 | vagrantc has left IRC (vagrantc!~vagrant@unaffiliated/vagrantc, Quit: leaving) | |