Bug#427716: gdm: RetryDelay has no effect

[Josh Triplett]

Josselin Mouette wrote:
> Le mardi 05 juin 2007 à 17:31 -0700, Josh Triplett a écrit :
>> The RetryDelay configuration option does not seem to have any effect.  Even
>> with RetryDelay=0, gdm still waits several seconds after a failed login
>> attempt.
> 
> The delay code in GDM is currently deactivated. However, as explained in
> the pam_fail_delay manual page, modules can request a minimal delay.
> This is what pam_unix does (support.c:681), which means an application
> cannot request a smaller delay.

From looking at the code in GDM, it doesn't seem to call pam_fail_delay
itself; that code seems disabled.  Instead, it has its own sleep calls.
I didn't realize that pam_unix calls pam_fail_delay itself.

It looks like I can make this delay go away for gdm by putting "nodelay" on
the pam_unix line in /etc/pam.d/gdm (which will require replacing the include
of common-auth with its contents).  However, I don't see any way to reduce the
delay without turning it off completely.

- Josh Triplett

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 252 bytes
Desc: OpenPGP digital signature
Url : http://lists.alioth.debian.org/pipermail/pkg-gnome-maintainers/attachments/20070606/9be81207/attachment.pgp