Add new switchable-auth PAM stack by pbrezina · Pull Request #425 · authselect/authselect · GitHub
Skip to content

Add new switchable-auth PAM stack#425

Merged
pbrezina merged 5 commits into
authselect:masterfrom
pbrezina:switchable
Dec 3, 2025
Merged

Add new switchable-auth PAM stack#425
pbrezina merged 5 commits into
authselect:masterfrom
pbrezina:switchable

Conversation

@pbrezina

@pbrezina pbrezina commented Nov 5, 2025

Copy link
Copy Markdown
Member

No description provided.

@pbrezina pbrezina marked this pull request as draft November 5, 2025 13:07
@pbrezina pbrezina force-pushed the switchable branch 3 times, most recently from 9d74b8d to dd38554 Compare November 5, 2025 13:59
@pbrezina pbrezina marked this pull request as ready for review November 5, 2025 13:59
@pbrezina pbrezina requested a review from ikerexxe November 5, 2025 14:00
Comment thread src/lib/authselect_files.c Dismissed

@ikerexxe ikerexxe left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Commits 2 and 3 mention Resolves: https://github.com/authselect/, but that's not correct. Apart from that I left some comments inline.

Comment thread profiles/sssd/switchable-auth Outdated
Comment thread profiles/sssd/switchable-auth Outdated
Comment thread profiles/sssd/README Outdated
Comment thread src/cli/main.c Outdated
@joantolo

joantolo commented Nov 6, 2025

Copy link
Copy Markdown

@pbrezina pbrezina force-pushed the switchable branch 2 times, most recently from 1b7bbcd to d3b836c Compare November 14, 2025 11:40
@pbrezina

Copy link
Copy Markdown
Member Author

Please review and test this again. Thank you.

Comment thread profiles/sssd/dconf-db Outdated

@ikerexxe ikerexxe left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM! Thank you for putting this together.

@joantolo joantolo Nov 25, 2025

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

By default the dconf option enable-switchable-authentication is true.

We want it to be false in these profiles. Can it be explicitly set for these profiles?

I thought it was already set in an old version of this PR.

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It is for sssd 3444ffc#diff-0361612e3581da745de2cb12631d211904fff5e4b31c77dc5d99ae8cbcc22896R7

If I get it correctly, you want to set it to false on other profiles as it does not make sense to use it there, right?

@pbrezina pbrezina Nov 26, 2025

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Done, nice catch. See latest update.

@joantolo joantolo left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Great. LGTM!

@pbrezina pbrezina merged commit 804e4f7 into authselect:master Dec 3, 2025
12 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants