A System and Service Manager
Go to file
David Tardon 4ab2887d57 pam: do not require a non-expired password for user@.service
Without this parameter, we would allow user@ to start if the user
has no password (i.e. the password is "locked"). But when the user does have a password,
and it is marked as expired, we would refuse to start the service.
There are other authentication mechanisms and we should not tie this service to
the password state.

The documented way to disable an *account* is to call 'chage -E0'. With a disabled
account, user@.service will still refuse to start:

systemd[16598]: PAM failed: User account has expired
systemd[16598]: PAM failed: User account has expired
systemd[16598]: user@1005.service: Failed to set up PAM session: Operation not permitted
systemd[16598]: user@1005.service: Failed at step PAM spawning /usr/lib/systemd/systemd: Operation n  ot permitted
systemd[1]: user@1005.service: Main process exited, code=exited, status=224/PAM
systemd[1]: user@1005.service: Failed with result 'exit-code'.
systemd[1]: Failed to start user@1005.service.
systemd[1]: Stopping user-runtime-dir@1005.service...

RHEL-only

Resolves: #2059553
2022-04-20 10:19:51 +02:00
tests RHEL 9.0.0 Alpha bootstrap 2020-10-15 10:17:11 -07:00
.gitignore Merged update from upstream sources 2021-02-16 18:25:28 +00:00
.zuul.yaml Merged update from upstream sources 2021-02-16 18:25:28 +00:00
0001-logind-set-RemoveIPC-to-false-by-default.patch systemd-250-3 2022-02-08 16:11:14 +01:00
0002-tmpfiles-don-t-create-resolv.conf-stub-resolv.conf-s.patch systemd-250-3 2022-02-08 16:11:14 +01:00
0003-Copy-40-redhat.rules-from-RHEL-8.patch systemd-250-3 2022-02-08 16:11:14 +01:00
0004-Avoid-tmp-being-mounted-as-tmpfs-without-the-user-s-.patch systemd-250-3 2022-02-08 16:11:14 +01:00
0005-unit-don-t-add-Requires-for-tmp.mount.patch systemd-250-3 2022-02-08 16:11:14 +01:00
0006-units-add-Install-section-to-tmp.mount.patch systemd-250-3 2022-02-08 16:11:14 +01:00
0007-rc-local-order-after-network-online.target.patch systemd-250-3 2022-02-08 16:11:14 +01:00
0008-ci-drop-CIs-irrelevant-for-downstream.patch systemd-250-3 2022-02-08 16:11:14 +01:00
0009-ci-reconfigure-Packit-for-RHEL-9.patch systemd-250-3 2022-02-08 16:11:14 +01:00
0010-ci-run-unit-tests-on-z-stream-branches-as-well.patch systemd-250-3 2022-02-08 16:11:14 +01:00
10-oomd-defaults.conf Merged update from upstream sources 2021-04-02 07:00:29 +00:00
10-oomd-root-slice-defaults.conf Merged update from upstream sources 2021-02-16 18:25:28 +00:00
10-oomd-user-service-defaults.conf Merged update from upstream sources 2021-04-02 07:00:29 +00:00
0011-random-util-increase-random-seed-size-to-1024.patch systemd-250-3 2022-02-08 16:11:14 +01:00
0012-journal-don-t-enable-systemd-journald-audit.socket-b.patch systemd-250-3 2022-02-08 16:11:14 +01:00
0013-journald.conf-don-t-touch-current-audit-settings.patch systemd-250-3 2022-02-08 16:11:14 +01:00
0014-Revert-udev-remove-WAIT_FOR-key.patch systemd-250-3 2022-02-08 16:11:14 +01:00
0015-Really-don-t-enable-systemd-journald-audit.socket.patch systemd-250-3 2022-02-08 16:11:14 +01:00
0016-rules-add-elevator-kernel-command-line-parameter.patch systemd-250-3 2022-02-08 16:11:14 +01:00
0017-units-don-t-enable-tmp.mount-statically-in-local-fs..patch systemd-250-3 2022-02-08 16:11:14 +01:00
0018-pid1-bump-DefaultTasksMax-to-80-of-the-kernel-pid.ma.patch systemd-250-3 2022-02-08 16:11:14 +01:00
0019-set-core-ulimit-to-0-like-on-RHEL-7.patch systemd-250-3 2022-02-08 16:11:14 +01:00
0020-ci-use-C9S-chroots-in-Packit.patch systemd-250-3 2022-02-08 16:11:14 +01:00
20-grubby.install RHEL 9.0.0 Alpha bootstrap 2020-10-15 10:17:11 -07:00
20-yama-ptrace.conf RHEL 9.0.0 Alpha bootstrap 2020-10-15 10:17:11 -07:00
0021-test-mountpointutil-util-do-not-assert-in-test_mnt_i.patch systemd-250-3 2022-02-08 16:11:14 +01:00
0022-Treat-EPERM-as-not-available-too.patch systemd-250-3 2022-02-08 16:11:14 +01:00
0023-test-copy-portable-profiles-into-the-image-if-they-d.patch systemd-250-3 2022-02-08 16:11:14 +01:00
0024-test-introduce-get_cgroup_hierarchy-helper.patch systemd-250-3 2022-02-08 16:11:14 +01:00
0025-test-require-unified-cgroup-hierarchy-for-TEST-56.patch systemd-250-3 2022-02-08 16:11:14 +01:00
0026-tests-rework-test-macros-to-not-take-code-as-paramet.patch systemd-250-3 2022-02-08 16:11:14 +01:00
0027-test-allow-to-set-NULL-to-intro-or-outro.patch systemd-250-3 2022-02-08 16:11:14 +01:00
0028-udev-net-setup-link-change-the-default-MACAddressPol.patch systemd-250-4 2022-02-23 11:09:19 +01:00
0029-man-mention-System-Administrator-s-Guide-in-systemct.patch systemd-250-4 2022-02-23 11:09:19 +01:00
0030-Net-naming-scheme-for-RHEL-9.0.patch systemd-250-4 2022-02-23 11:09:19 +01:00
0031-core-decrease-log-level-of-messages-about-use-of-Kil.patch systemd-250-4 2022-02-23 11:09:19 +01:00
0032-ci-replace-apt-key-with-signed-by.patch systemd-250-4 2022-02-23 11:09:19 +01:00
0033-ci-fix-clang-13-installation.patch systemd-250-4 2022-02-23 11:09:19 +01:00
gating.yaml Add RHEL gating configuration 2021-07-15 03:28:23 +02:00
inittab RHEL 9.0.0 Alpha bootstrap 2020-10-15 10:17:11 -07:00
libsystemd-shared.abignore RHEL 9.0.0 Alpha bootstrap 2020-10-15 10:17:11 -07:00
macros.sysusers RHEL 9.0.0 Alpha bootstrap 2020-10-15 10:17:11 -07:00
nocache.conf Merged update from upstream sources 2021-03-21 09:35:20 +00:00
owner-check.sh Merged update from upstream sources 2021-04-02 07:00:29 +00:00
owner-check.template Merged update from upstream sources 2021-02-16 18:25:28 +00:00
purge-nobody-user RHEL 9.0.0 Alpha bootstrap 2020-10-15 10:17:11 -07:00
rc.local Install RHEL-7 compatible rc.local 2021-10-12 08:21:34 +00:00
rpminspect.yaml Merged update from upstream sources 2021-02-04 22:34:30 +00:00
sources Rebase to v250 2022-01-31 13:24:15 +01:00
split-files.py Move systemd-cryptenroll to systemd-udev 2022-02-07 11:01:01 +00:00
sysctl.conf.README RHEL 9.0.0 Alpha bootstrap 2020-10-15 10:17:11 -07:00
systemd-journal-gatewayd.xml RHEL 9.0.0 Alpha bootstrap 2020-10-15 10:17:11 -07:00
systemd-journal-remote.xml RHEL 9.0.0 Alpha bootstrap 2020-10-15 10:17:11 -07:00
systemd-udev-trigger-no-reload.conf RHEL 9.0.0 Alpha bootstrap 2020-10-15 10:17:11 -07:00
systemd-user pam: do not require a non-expired password for user@.service 2022-04-20 10:19:51 +02:00
systemd.rpmlintrc RHEL 9.0.0 Alpha bootstrap 2020-10-15 10:17:11 -07:00
systemd.spec systemd-250-4 2022-02-23 11:09:19 +01:00
sysusers.attr RHEL 9.0.0 Alpha bootstrap 2020-10-15 10:17:11 -07:00
sysusers.generate-pre.sh RHEL 9.0.0 Alpha bootstrap 2020-10-15 10:17:11 -07:00
sysusers.prov RHEL 9.0.0 Alpha bootstrap 2020-10-15 10:17:11 -07:00
triggers.systemd Merged update from upstream sources 2021-03-01 10:10:04 +00:00
yum-protect-systemd.conf RHEL 9.0.0 Alpha bootstrap 2020-10-15 10:17:11 -07:00