Bug 24788

Summary:	pam_limits.so not enforcing @group maxlogins
Product:	Gentoo Linux	Reporter:	Patrick Reich <dminor>
Component:	[OLD] Core system	Assignee:	PAM Gentoo Team (OBSOLETE) <pam-bugs+disabled>
Status:	RESOLVED TEST-REQUEST
Severity:	normal	CC:	jakub
Priority:	High
Version:	unspecified
Hardware:	x86
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---

Description Patrick Reich 2003-07-18 23:54:43 UTC

Set a group limit of @users - maxlogins 2 in /etc/security/login.conf but
members of the users group can login as many times as they wish either at the
console or through ssh.  Verified pam_limits.so is in system-auth for both login
and sshd.  If I set a specific user limit, such as user1 - maxlogins 1, the
limit is enforced.

Reproducible: Always
Steps to Reproduce:
1.  Set @users - maxlogins 1 in /etc/security/limits.conf
2.  By default, newly created accounts are given gid 100 (users)
3.  Make sure session required /lib/security/pam_limits.so is in system-auth
which is called by login and sshd.
4.  Login as many times as you want, either at the console or ssh.
Actual Results:  
Logged in 5 times via ssh.  Closed all ssh connections.  Was able to login 5+
times at the console.  Doesn't seem to matter where.

Expected Results:  
Should have enforced a limit of 1 login for the users group.

Comment 1 Heinrich Wendel (RETIRED) gentoo-dev

2004-03-15 12:01:11 UTC

is this still an issue?

Comment 2 Patrick Reich 2004-08-10 14:34:15 UTC

Quite honestly, I don't know if it's still broken or fixed.  When I realized I couldn't use this feature (and a fix was not close at hand), I had to move on.  If necessary, I can test this feature again on the Gentoo box I'm bringing up now; however, it might be a few days as this is a stage 1 install.

Comment 3 Jakub Moc (RETIRED) gentoo-dev

2005-08-11 05:03:27 UTC

Please, test with sys-libs/pam-0.78-r2 and reopen if there are still problems.