Hello guys,
I did not use gdm for some time and now I'm not happy how it looks in Fedora 11. First of all - the list of local users is unacceptable from security reasons. Even if it supports such "an " option - how it can be the default one?! Second problem I have is shutdown button (and possibly restart as well) - when you click on shutdown button by mistake, system will shut - there is no confirmation dialog.
I also tried to find some ways how to customize gdm in Fedora 11 but I did not find any usable guide.
Can anybody please advise me how can I have prompt asking for username only (showing last logged user at maximum) and not displaying the list of all local users? Also can I somehow add confirmation or remove shutdown restart buttons from gdm screen?
Or can you please advise any alternative to gdm?
Thank you very much,
Jan
On Mon, 31 Aug 2009 22:46:17 +0100 jaivuk wrote:
Or can you please advise any alternative to gdm?
yum install kdm
cat > /etc/sysconfig/desktop DISPLAYMANAGER=KDE ^D
reboot (I don't think a mere restart is enough).
You will then be using kdm instead of gdm for logins and you can customize kdm to your heart's content by editing the nice simple to understand text file:
/etc/kde/kdm/kdmrc
Not only does it have comments, but I see there is also a /usr/share/doc/HTML/en/kdm/kdmrc-ref.docbook file installed (which I never looked at because the comments were good enough :-).
jaivuk writes:
I did not use gdm for some time and now I'm not happy how it looks in Fedora 11. First of all - the list of local users is unacceptable from security reasons.
Have you ever looked, by any chance, at the contents of /etc/passwd?
On Mon, 31 Aug 2009, jaivuk wrote:
Hello guys,
I did not use gdm for some time and now I'm not happy how it looks in Fedora 11. First of all - the list of local users is unacceptable from security reasons. Even if it supports such "an " option - how it can be the default one?!
Having the user list on by default makes sense for a home PC that is only going to be used by one or two users, and where security is less important. There is a disable_user_list gconf option, see http://library.gnome.org/admin/gdm/2.26/gdm.html#greeterconfiguration
Michael Young
On Mon, Aug 31, 2009 at 11:41:28PM +0100, M A Young wrote:
On Mon, 31 Aug 2009, jaivuk wrote:
Hello guys,
I did not use gdm for some time and now I'm not happy how it looks in Fedora 11. First of all - the list of local users is unacceptable from security reasons. Even if it supports such "an " option - how it can be the default one?!
Having the user list on by default makes sense for a home PC that is only going to be used by one or two users, and where security is less important. There is a disable_user_list gconf option, see http://library.gnome.org/admin/gdm/2.26/gdm.html#greeterconfiguration
I just tried this on my F11 laptop, following the web page you suggest, and I got no change at all in behavior after a reboot,... it still displays the list of users.
Hi,
I tried it as well with the same negative result - it does not work.
Steps I did:
On Tue, Sep 1, 2009 at 1:22 AM, fred smith fredex@fcshome.stoneham.ma.uswrote:
On Mon, Aug 31, 2009 at 11:41:28PM +0100, M A Young wrote:
On Mon, 31 Aug 2009, jaivuk wrote:
Hello guys,
I did not use gdm for some time and now I'm not happy how it looks in Fedora 11. First of all - the list of local users is unacceptable from security reasons. Even if it supports such "an " option - how it can be the
default
one?!
Having the user list on by default makes sense for a home PC that is only going to be used by one or two users, and where security is less important. There is a disable_user_list gconf option, see http://library.gnome.org/admin/gdm/2.26/gdm.html#greeterconfiguration
I just tried this on my F11 laptop, following the web page you suggest, and I got no change at all in behavior after a reboot,... it still displays the list of users.
-- ---- Fred Smith -- fredex@fcshome.stoneham.ma.us----------------------------- "And he will be called Wonderful Counselor, Mighty God, Everlasting Father, Prince of Peace. Of the increase of his government there will be no end. He will reign on David's throne and over his kingdom, establishing and upholding it with justice and righteousness from that time on and forever."
------------------------------- Isaiah 9:7 (niv)
-- fedora-list mailing list fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
Hi,
I tried it as well with the same negative result - it does not work.
Steps I did:
1. sudo yum install gconf-editor 2. gconf-editor - opened /apps/gdm/simple-greeter/ - selected disable_user_list and disable_restart_buttons 3. after reboot - list of users is still displayed, "restart" buttons are still in gdm's offer 4. I logged in and doublechecked the settings- disable_user and disable_restart_buttons are still selected, so it is a bug and my subject is still valid
However I'm not going to open a ticket as I'm going to use KDM as suggested in previous post. It is also a bit strange to me GDM settings can(?) be altered by standard user - I think it should be root's priviledge... I also don't like registry-like settings where you are (almost) unable to make a change manually...
Thank you for all replies.
jaiv
On Tue, Sep 1, 2009 at 1:22 AM, fred smith fredex@fcshome.stoneham.ma.uswrote:
On Mon, Aug 31, 2009 at 11:41:28PM +0100, M A Young wrote:
On Mon, 31 Aug 2009, jaivuk wrote:
Hello guys,
I did not use gdm for some time and now I'm not happy how it looks in Fedora 11. First of all - the list of local users is unacceptable from security reasons. Even if it supports such "an " option - how it can be the
default
one?!
Having the user list on by default makes sense for a home PC that is only going to be used by one or two users, and where security is less important. There is a disable_user_list gconf option, see http://library.gnome.org/admin/gdm/2.26/gdm.html#greeterconfiguration
I just tried this on my F11 laptop, following the web page you suggest, and I got no change at all in behavior after a reboot,... it still displays the list of users.
-- ---- Fred Smith -- fredex@fcshome.stoneham.ma.us----------------------------- "And he will be called Wonderful Counselor, Mighty God, Everlasting Father, Prince of Peace. Of the increase of his government there will be no end. He will reign on David's throne and over his kingdom, establishing and upholding it with justice and righteousness from that time on and forever."
------------------------------- Isaiah 9:7 (niv)
-- fedora-list mailing list fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
Greetings,
I found the solution back in Fedora 10. It's not exactly "user friendly"...
All on one line:
sudo gconftool-2 --direct --config-source xml:readwrite:/etc/gconf/gconf.xml.mandatory -s --type=bool /apps/gdm/simple-greeter/disable_user_list true
The change should be instant... just log out and log back in.
Fedora Devs: please take a cue from the Ubuntu camp and either use a sane version of GDM or fix the atrocity that is the current shipping version. Gconftool is even less friendly than Windows' Registry Editor.
Aloha, Chris
On 08/31/2009 04:11 PM, jaivuk wrote:
Hi,
I tried it as well with the same negative result - it does not work.
Steps I did:
On Tue, Sep 1, 2009 at 1:22 AM, fred smith <fredex@fcshome.stoneham.ma.us mailto:fredex@fcshome.stoneham.ma.us> wrote:
On Mon, Aug 31, 2009 at 11:41:28PM +0100, M A Young wrote: > On Mon, 31 Aug 2009, jaivuk wrote: > > >Hello guys, > > > >I did not use gdm for some time and now I'm not happy how it looks in > >Fedora > >11. > >First of all - the list of local users is unacceptable from security > >reasons. Even if it supports such "an " option - how it can be the default > >one?! > > Having the user list on by default makes sense for a home PC that is only > going to be used by one or two users, and where security is less > important. There is a disable_user_list gconf option, see > http://library.gnome.org/admin/gdm/2.26/gdm.html#greeterconfiguration I just tried this on my F11 laptop, following the web page you suggest, and I got no change at all in behavior after a reboot,... it still displays the list of users. -- ---- Fred Smith -- fredex@fcshome.stoneham.ma.us <mailto:fredex@fcshome.stoneham.ma.us> ----------------------------- "And he will be called Wonderful Counselor, Mighty God, Everlasting Father, Prince of Peace. Of the increase of his government there will be no end. He will reign on David's throne and over his kingdom, establishing and upholding it with justice and righteousness from that time on and forever." ------------------------------- Isaiah 9:7 (niv) ------------------------------ -- fedora-list mailing list fedora-list@redhat.com <mailto:fedora-list@redhat.com> To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
Chris,
Your solution works in F11 as well.
There is just one cosmetic thing - there is selection box saying "Other..." - this should be removed as it has no function.
Thank you very much,
jaiv
On Tue, Sep 1, 2009 at 3:32 AM, Chris Stark cstark@hawaii.edu wrote:
Greetings,
I found the solution back in Fedora 10. It's not exactly "user friendly"...
All on one line:
sudo gconftool-2 --direct --config-source xml:readwrite:/etc/gconf/gconf.xml.mandatory -s --type=bool /apps/gdm/simple-greeter/disable_user_list true
The change should be instant... just log out and log back in.
Fedora Devs: please take a cue from the Ubuntu camp and either use a sane version of GDM or fix the atrocity that is the current shipping version. Gconftool is even less friendly than Windows' Registry Editor.
Aloha, Chris
On 08/31/2009 04:11 PM, jaivuk wrote:
Hi,
I tried it as well with the same negative result - it does not work.
Steps I did:
On Tue, Sep 1, 2009 at 1:22 AM, fred smith <fredex@fcshome.stoneham.ma.us mailto:fredex@fcshome.stoneham.ma.us> wrote:
On Mon, Aug 31, 2009 at 11:41:28PM +0100, M A Young wrote: > On Mon, 31 Aug 2009, jaivuk wrote: > > >Hello guys, > > > >I did not use gdm for some time and now I'm not happy how it looks in > >Fedora > >11. > >First of all - the list of local users is unacceptable from security > >reasons. Even if it supports such "an " option - how it can be the default > >one?! > > Having the user list on by default makes sense for a home PC that is only > going to be used by one or two users, and where security is less > important. There is a disable_user_list gconf option, see > http://library.gnome.org/admin/gdm/2.26/gdm.html#greeterconfiguration
I just tried this on my F11 laptop, following the web page you suggest, and I got no change at all in behavior after a reboot,... it still displays the list of users.
-- ---- Fred Smith -- fredex@fcshome.stoneham.ma.us mailto:fredex@fcshome.stoneham.ma.us ----------------------------- "And he will be called Wonderful Counselor, Mighty God, Everlasting Father, Prince of Peace. Of the increase of his government there will be no end. He will reign on David's throne and over his kingdom, establishing and upholding it with justice and righteousness from that time on and forever."
------------------------------- Isaiah 9:7 (niv)
-- fedora-list mailing list fedora-list@redhat.com mailto:fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
-- fedora-list mailing list fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
Greetings,
Believe me, I would love to get rid of the silly "Other..." entry, but I have no idea how, aside from diving into the source code and commenting it out.
As much as I love Fedora (I've been using it as my primary desktop since it was Red Hat 7.2), it's really shocking that GDM has been so bad for so long. The defaults are unusable for systems in a public setting, and they hardly make sense for a personal system if one has any regard for security or privacy.
I'm not a huge fan of Ubuntu, but GDM is one thing they got very right compared to Fedora. Fedora Devs: Please, please, please fix it! :)
Aloha, Chris
On 08/31/2009 04:42 PM, jaivuk wrote:
Chris,
Your solution works in F11 as well.
There is just one cosmetic thing - there is selection box saying "Other..." - this should be removed as it has no function.
Thank you very much,
jaiv
On Tue, Sep 1, 2009 at 3:32 AM, Chris Stark <cstark@hawaii.edu mailto:cstark@hawaii.edu> wrote:
Greetings, I found the solution back in Fedora 10. It's not exactly "user friendly"... All on one line: sudo gconftool-2 --direct --config-source xml:readwrite:/etc/gconf/gconf.xml.mandatory -s --type=bool /apps/gdm/simple-greeter/disable_user_list true The change should be instant... just log out and log back in. Fedora Devs: please take a cue from the Ubuntu camp and either use a sane version of GDM or fix the atrocity that is the current shipping version. Gconftool is even less friendly than Windows' Registry Editor. Aloha, Chris On 08/31/2009 04:11 PM, jaivuk wrote: Hi, I tried it as well with the same negative result - it does not work. Steps I did: On Tue, Sep 1, 2009 at 1:22 AM, fred smith <fredex@fcshome.stoneham.ma.us <mailto:fredex@fcshome.stoneham.ma.us> <mailto:fredex@fcshome.stoneham.ma.us <mailto:fredex@fcshome.stoneham.ma.us>>> wrote: On Mon, Aug 31, 2009 at 11:41:28PM +0100, M A Young wrote: > On Mon, 31 Aug 2009, jaivuk wrote: > > >Hello guys, > > > >I did not use gdm for some time and now I'm not happy how it looks in > >Fedora > >11. > >First of all - the list of local users is unacceptable from security > >reasons. Even if it supports such "an " option - how it can be the default > >one?! > > Having the user list on by default makes sense for a home PC that is only > going to be used by one or two users, and where security is less > important. There is a disable_user_list gconf option, see > http://library.gnome.org/admin/gdm/2.26/gdm.html#greeterconfiguration I just tried this on my F11 laptop, following the web page you suggest, and I got no change at all in behavior after a reboot,... it still displays the list of users. -- ---- Fred Smith -- fredex@fcshome.stoneham.ma.us <mailto:fredex@fcshome.stoneham.ma.us> <mailto:fredex@fcshome.stoneham.ma.us <mailto:fredex@fcshome.stoneham.ma.us>> ----------------------------- "And he will be called Wonderful Counselor, Mighty God, Everlasting Father, Prince of Peace. Of the increase of his government there will be no end. He will reign on David's throne and over his kingdom, establishing and upholding it with justice and righteousness from that time on and forever." ------------------------------- Isaiah 9:7 (niv) ------------------------------ -- fedora-list mailing list fedora-list@redhat.com <mailto:fedora-list@redhat.com> <mailto:fedora-list@redhat.com <mailto:fedora-list@redhat.com>> To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines -- fedora-list mailing list fedora-list@redhat.com <mailto:fedora-list@redhat.com> To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
On Mon, Aug 31, 2009 at 04:32:22PM -1000, Chris Stark wrote:
Greetings,
I found the solution back in Fedora 10. It's not exactly "user friendly"...
Yes, works! Thanks!
All on one line:
sudo gconftool-2 --direct --config-source xml:readwrite:/etc/gconf/gconf.xml.mandatory -s --type=bool /apps/gdm/simple-greeter/disable_user_list true
The change should be instant... just log out and log back in.
Fedora Devs: please take a cue from the Ubuntu camp and either use a sane version of GDM or fix the atrocity that is the current shipping version. Gconftool is even less friendly than Windows' Registry Editor.
Aloha, Chris
On 08/31/2009 04:11 PM, jaivuk wrote:
Hi,
I tried it as well with the same negative result - it does not work.
Steps I did:
On Tue, Sep 1, 2009 at 1:22 AM, fred smith <fredex@fcshome.stoneham.ma.us mailto:fredex@fcshome.stoneham.ma.us> wrote:
On Mon, Aug 31, 2009 at 11:41:28PM +0100, M A Young wrote: > On Mon, 31 Aug 2009, jaivuk wrote: > > >Hello guys, > > > >I did not use gdm for some time and now I'm not happy how it looks in > >Fedora > >11. > >First of all - the list of local users is unacceptable from security > >reasons. Even if it supports such "an " option - how it can be the default > >one?! > > Having the user list on by default makes sense for a home PC that is only > going to be used by one or two users, and where security is less > important. There is a disable_user_list gconf option, see > http://library.gnome.org/admin/gdm/2.26/gdm.html#greeterconfiguration
I just tried this on my F11 laptop, following the web page you suggest, and I got no change at all in behavior after a reboot,... it still displays the list of users.
-- ---- Fred Smith -- fredex@fcshome.stoneham.ma.us mailto:fredex@fcshome.stoneham.ma.us ----------------------------- "And he will be called Wonderful Counselor, Mighty God, Everlasting Father, Prince of Peace. Of the increase of his government there will be no end. He will reign on David's throne and over his kingdom, establishing and upholding it with justice and righteousness from that time on and forever."
------------------------------- Isaiah 9:7 (niv)
-- fedora-list mailing list fedora-list@redhat.com mailto:fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
-- fedora-list mailing list fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
On Mon, Aug 31, 2009 at 04:32:22PM -1000, Chris Stark wrote:
Greetings,
I found the solution back in Fedora 10. It's not exactly "user friendly"...
All on one line:
sudo gconftool-2 --direct --config-source xml:readwrite:/etc/gconf/gconf.xml.mandatory -s --type=bool /apps/gdm/simple-greeter/disable_user_list true
I tried this on my F13 this afternoon and I've just spent an hour or more digging back out of the hole it left me in...
After making that change and rebooting (reboot is probably overkill) it came back to the login screen with a gdm window ONE PIXEL WIDE. I couldn't figure out how to place the mouse so I could log in.
NM is configured to bring up wireless when someone logs in, so that wouldn't work. but by sheer chance I had previously configured the wired network to come up on boot, so I could log in via ssh to poke around.
I finally "fixed" it by renaming the directory /etc/gconf/gconf.xml.mandatory to something else then creating an empty dir of the same name.
before renaming it, I could run gconf-editor (via remote login) but it claimed that 'disable_user_list' was read-only and wouldn't let me change it. :(
So, it looks like either I was incredibly unlucky and accidentally tweaked something else I shouldn't have, or else this doesn't work on F13.
I'd love to get rid of the user list. (one wonders: just because Windoze exposes all the users to anyone walking by, does that mean Linux therefore must do the same stupid thing?)
Anyone else know how to turn off the user list on F13?
Thanks!
The change should be instant... just log out and log back in.
Fedora Devs: please take a cue from the Ubuntu camp and either use a sane version of GDM or fix the atrocity that is the current shipping version. Gconftool is even less friendly than Windows' Registry Editor.
Aloha, Chris
On 08/31/2009 04:11 PM, jaivuk wrote:
Hi,
I tried it as well with the same negative result - it does not work.
Steps I did:
On Tue, Sep 1, 2009 at 1:22 AM, fred smith <fredex@fcshome.stoneham.ma.us mailto:fredex@fcshome.stoneham.ma.us> wrote:
On Mon, Aug 31, 2009 at 11:41:28PM +0100, M A Young wrote: > On Mon, 31 Aug 2009, jaivuk wrote: > > >Hello guys, > > > >I did not use gdm for some time and now I'm not happy how it looks in > >Fedora > >11. > >First of all - the list of local users is unacceptable from security > >reasons. Even if it supports such "an " option - how it can be the default > >one?! > > Having the user list on by default makes sense for a home PC that is only > going to be used by one or two users, and where security is less > important. There is a disable_user_list gconf option, see > http://library.gnome.org/admin/gdm/2.26/gdm.html#greeterconfiguration
I just tried this on my F11 laptop, following the web page you suggest, and I got no change at all in behavior after a reboot,... it still displays the list of users.
-- ---- Fred Smith -- fredex@fcshome.stoneham.ma.us mailto:fredex@fcshome.stoneham.ma.us ----------------------------- "And he will be called Wonderful Counselor, Mighty God, Everlasting Father, Prince of Peace. Of the increase of his government there will be no end. He will reign on David's throne and over his kingdom, establishing and upholding it with justice and righteousness from that time on and forever."
------------------------------- Isaiah 9:7 (niv)
-- fedora-list mailing list fedora-list@redhat.com mailto:fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
-- fedora-list mailing list fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
On Mon, 2010-05-31 at 18:44 -0400, fred smith wrote:
I couldn't figure out how to place the mouse so I could log in.
[Please don't top-post on this list. See the Guidelines.]
Couldn't you log in on a console? Ctrl-Alt-Fn.
poc
NM is configured to bring up wireless when someone logs in, so that wouldn't work. but by sheer chance I had previously configured the wired network to come up on boot, so I could log in via ssh to poke around.
By editing your grub cmd which you can do regardless of network config and telling it to boot into something other than "5" will help in the future.
I'd love to get rid of the user list. (one wonders: just because Windoze exposes all the users to anyone walking by, does that mean Linux therefore must do the same stupid thing?)
I'm sorry, I don't know what "Windoze" is, but there is a an operating system called Windows that if you know how to administer correctly allows for the Welcome Screen to be disabled or even certain users hidden from it.
Anyone else know how to turn off the user list on F13?
Not in Gnome:)
On Mon, May 31, 2010 at 06:37:43PM -0430, Patrick O'Callaghan wrote:
On Mon, 2010-05-31 at 18:44 -0400, fred smith wrote:
I couldn't figure out how to place the mouse so I could log in.
[Please don't top-post on this list. See the Guidelines.]
Couldn't you log in on a console? Ctrl-Alt-Fn.
Yes. Of course, you're right. but I was thinking of runnning gui programs (such as gconf-editor) and wasn't thinking of using startx to do it, so my feeble brain was expecting to have to use "ssh -X".
So much for getting old.
-
Chris Stark -
Fred Smith -
jaivuk -
Joseph L. Casale -
M A Young -
Patrick O'Callaghan -
Sam Varshavchik -
Tom Horsley