Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Pam interaction when time-limit on logins is configured #340

Open
bigcattus opened this issue Apr 23, 2023 · 2 comments
Open

Pam interaction when time-limit on logins is configured #340

bigcattus opened this issue Apr 23, 2023 · 2 comments

Comments

@bigcattus
Copy link

I'm submitting a…

[X ] Bug
[ ] Feature Request
[ ] Other (Please describe in detail)

Current Behavior

I am trying to make i3lock refuse an unlock after a certain time of the day.
/etc/pam.d/login contains:
account requisite pam_time.so
/etc/security/time.conf has:
;;username;Al0630-2130
Finally, /etc/pam.d/i3lock contains "auth include login"

Expected Behavior

Fail to authenticate and refuse to unlock outside of specified time limits.

Reproduction Instructions

Please see above.
The system is latest debian.

Environment

Output of i3lock --version:

i3lock version: version 2.14.1 
@stapelberg
Copy link
Member

Does it work with other screen lockers? Or with SSH?

I suspect the issue is with your PAM configuration, not with i3lock.

@bigcattus
Copy link
Author

bigcattus commented Apr 23, 2023

I didn't try other lockers (it's a bit complicated since I use xorg+dwm, no desktop environment).
However logins are correctly denied on the console or via ssh if I try to login outside of the timeframe specified in time.conf. For ssh I had to add additional "requisite" line to /etc/pam.d/sshd.
Thanks.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants