-
Notifications
You must be signed in to change notification settings - Fork 964
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Support the "%u" username alias in PlainUsers #1671
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This looks nice and clean! Thanks!
I wonder if there is a more descriptive marker we can use, though. I understand why systemd uses a single character, as it behaves more like a format string there. But in our case, it's a complete entry.
Did you stumble upon any more examples of configuration that has a marker like this? And wasn't using $USER
. :)
%u
probably works if we can't find anything better. But this is something we can't easily change later, so I think it is worth looking a bit extra at what options we have here.
Dovecot also uses https://doc.dovecot.org/configuration_manual/config_file/config_variables/#variables-mail-user It also has longer names in the notation https://httpd.apache.org/docs/2.4/mod/mod_rewrite.html
https://specifications.freedesktop.org/desktop-entry-spec/desktop-entry-spec-latest.html Not that I think that is a blocker. |
My first draft recognized I think |
We don't seem to find any better alternatives, so let's proceed with |
This permits to enable PAM for the effective user of the Xvnc process by adding this to ~/.vnc/config or /etc/tigervnc/vncserver-config-defaults: SecurityTypes=TLSPlain PlainUsers=%u Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=2233204 Signed-off-by: Carlos Santos <[email protected]>
dda8e45
to
79d441e
Compare
This permits to enable PAM for the effective user of the Xvnc process by adding this to ~/.vnc/config or /etc/tigervnc/vncserver-config-defaults:
SecurityTypes=TLSPlain
PlainUsers=%u
Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=2233204