Skip to content

Commit

Permalink
Xvnc.man: Update pam-service-name doc for RHEL 8+
Browse files Browse the repository at this point in the history
On RHEL 8+, /etc/pam.d/passwd no longer works for PAM User/Password
Authentication.
  • Loading branch information
dcommander committed Aug 3, 2024
1 parent c39f9f9 commit 9d34a30
Showing 1 changed file with 11 additions and 5 deletions.
16 changes: 11 additions & 5 deletions unix/Xvnc/programs/Xserver/Xvnc.man.in
Original file line number Diff line number Diff line change
Expand Up @@ -13,7 +13,7 @@
.\" License as specified in the file LICENCE.TXT that comes with the
.\" TurboVNC distribution.
.\"
.TH Xvnc 1 "July 2024" "" "TurboVNC"
.TH Xvnc 1 "August 2024" "" "TurboVNC"
.SH NAME
Xvnc \- the TurboVNC X server
.SH SYNOPSIS
Expand Down Expand Up @@ -651,10 +651,16 @@ Do not allow X11 TCP connections to any TurboVNC session started on this host.
.IP \fIpam-service-name\fR=\fIsvcname\fR
Sets the service name to be used when Xvnc performs PAM authentication. The
default service name is \fIturbovnc\fR. This typically corresponds to a file
in \fB/etc/pam.d\fR or to a token in \fB/etc/pam.conf\fR. For instance, if
your system has a file named \fB/etc/pam.d/passwd\fR, then copying this file to
\fB/etc/pam.d/{svcname}\fR would cause the username and password sent by the
VNC viewer to be validated against \fB/etc/passwd\fR.
in \fB/etc/pam.d\fR or to a token in \fB/etc/pam.conf\fR. For instance, adding

\fBauth substack password-auth\fR
.br
\fBaccount substack password-auth\fR

to \fB/etc/pam.d/{svcname}\fR on Red Hat Enterprise Linux (and derivative)
systems or copying \fB/etc/pam.d/passwd\fR to \fB/etc/pam.d/{svcname}\fR on
Debian and SUSE (and derivative) systems would cause the username and password
sent by the VNC viewer to be validated against \fB/etc/passwd\fR.

.IP \fIpermitted-cipher-suites\fR=\fIsuite\fR[:\fIsuite\fR[...]]
Defines the set of permitted TLS cipher suites for the TLS* and X509* security
Expand Down

0 comments on commit 9d34a30

Please sign in to comment.