I DO WANT:
To be able to select a guest session from the user menu when logged in to my administrator account in case someone needs to use my computer.
I DO NOT WANT
Someone to be able to turn on my computer and login to a guest session
I have heard of a method where one edits /etc/lightdm/lightdm.conf to include allow-guest=false (then restarting lightdm)
The problem with that method is that I specifically do not want to completely disable the guest account. I only want to disable access to it from the login menu while still retaining the ability to (while logged in to my admin account) start a guest session manually.
Is there such a fix? I can't seem to find one via search engine (and it's very difficult to word for a search)
EDIT: Yes. Ubuntu 12.04 LTS (Desktop), the latest release.
And it needs to be a guest account because of the way it functions. I want the ability to allow others to use a guest account I can launch easily from my main account because of how it functions (no password, and the fact that everything on it gets deleted when the session is over) without having an exposed password-free account available to anyone who turns on my computer.
Though if I could achieve this via a standard limited account it would be acceptable since I could just change the settings on most of the software to not save anything. It would have to be passwordless and accessible via the user list while I am logged in to my main account, but invisible/inaccessible from the main login screen.
Here is the code I mentioned. As you can see the structure is very similar but there are some key differences. There is no auto required pam_unix.so and the link says to add a line called auth optional pam_permit.so but I already have auth required pam_permit.so and such other little differences.
#%PAM-1.0
auth requisite pam_nologin.so
auth required pam_env.so readenv=1
auth required pam_env.so readenv=1 envfile=/etc/default/locale
auth required pam_permit.so
@include common-account
session [success=ok ignore=ignore module_unknown=ignore default=bad] pam_selinux.so close
session required pam_limits.so
@include common-session
session [success=ok ignore=ignore module_unknown=ignore default=bad] pam_selinux.so open
@include common-password
Best Answer
I have an open PAM-related question right now, so I can say from experience that modifying any PAM modules can quickly get very specific to the version of Ubuntu you are working with. What works for Precise, may not always work for Quantal, etc.
That said, the answer to your question probably does not require any changes to PAM modules. In fact, you almost have it.
Add this line to the bottom of
/etc/lightdm/lightdm.confMy
lightdm.conflooks like this:Now restart your machine.
On 12.10, I tested that this removes Guest from the user menu, but leaves it as a manual option once logged in on another account.
Pretty sure this will work for you on 12.04 as well.