XPost: comp.sys.raspberry-pi, alt.os.linux.mageia   
   From: gtaylor@tnetconsulting.net   
      
   On 12/9/23 15:25, Markus Robert Kessler wrote:   
   > Hi everyone,   
      
   Hi,   
      
   > I have suspected pam authentication already, and in the meantime I   
   > compared Mageia and Raspbian more deeply regarding the entries in /etc/   
   > pam.d.   
      
   Aside:  I wouldn't call this "authentication" in this context.  PAM has   
   grown to do more things than just "authentication".  The very fact that   
   you are using the "session" module (?) supports that this isn't an   
   authentication feature.   
      
   PAM is a very good place to do a lot of things to help streamline things   
   related to client logins.   
      
   > I found out, that adding this line   
   >   
   > session         optional        pam_xauth.so   
   >   
   > to the front of /etc/pam.d/su   
      
   N.B. My understanding is that the order of lines in PAM is important.   
   --  You are probably safe following another distro as a sample.  But   
   don't sort the lines or anything like that.   
      
   > solves this issue. I've also tested this on Ubuntu successfully.   
      
   Nice work.   
      
   > Now, after su - newuser, invoking an app for X11, like xclock, makes this   
   > window open and working.   
      
   :-D   
      
   > Finally, big thanks to all of you for this wonderful and highly   
   > interesting discussion!   
      
   :-)   
      
   > Nevertheless, it turned out to be a good idea to always handle X / desktop   
   > sessions with care.   
      
   Absolutely!   
      
   I think it's even better to have some idea that there is complexity   
   behind it and that there might be more to look up if / when you have   
   need to tilt at the X11 shaped wind mill.   
      
      
      
   --   
   Grant. . . .   
      
   --- SoupGate-Win32 v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)