Re: [Bug 104957] Re: users with no password can't log in with gdm

On 2 November 2011 01:41, Michael Basse <104...@bugs.launchpad.net> wrote: > why should it be a bug instead of a security-feature? Because the policy defined in /etc/securetty for local graphical terminals is inconsistent with the policy defined there for local text terminals, and because the lack

[Bug 104957] Re: users with no password can't log in with gdm

and if it is needede (e.g. for kiosk-mode) this should not be the default in ubuntu. if someone wants login without password he should edit the needed configs in my opinion -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.l

[Bug 104957] Re: users with no password can't log in with gdm

why should it be a bug instead of a security-feature? for me its the same like "root is not able to login into gdm". So what is the reason to have this bug open? Also there is the guest-session -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to

[Bug 104957] Re: users with no password can't log in with gdm

** Changed in: gst Status: Unknown => Invalid ** Changed in: gst Importance: Unknown => Medium -- users with no password can't log in with gdm https://bugs.launchpad.net/bugs/104957 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubunt

[Bug 104957] Re: users with no password can't log in with gdm

This bug is not fixed in karmic, for the reasons stated in https://bugs.launchpad.net/ubuntu/+source/gdm/+bug/104957/comments/38 ** Changed in: gdm (Ubuntu) Status: Fix Released => Invalid -- users with no password can't log in with gdm https://bugs.launchpad.net/bugs/104957 You received

[Bug 104957] Re: users with no password can't log in with gdm

Any idea about the status of this in shadow and pam? Is this fixed because GDM is now considered as a secured tty, as it should? -- users with no password can't log in with gdm https://bugs.launchpad.net/bugs/104957 You received this bug notification because you are a member of Ubuntu Bugs, which

[Bug 104957] Re: users with no password can't log in with gdm

** Bug watch added: GNOME Bug Tracker #602110 https://bugzilla.gnome.org/show_bug.cgi?id=602110 ** Also affects: gst via https://bugzilla.gnome.org/show_bug.cgi?id=602110 Importance: Unknown Status: Unknown -- users with no password can't log in with gdm https://bugs.launchpad.ne

[Bug 104957] Re: users with no password can't log in with gdm

In contrast to Bug #393854, this bug is fixed in Karmic Koala. Just click on the username in gdm to login. Great! There's only a GUI to remove the password in users-admin missing. -- users with no password can't log in with gdm https://bugs.launchpad.net/bugs/104957 You received this bug notifica

[Bug 104957] Re: users with no password can't log in with gdm

Users with no password can login with GDM without any problems in Karmic Koala. ** Changed in: gdm Status: New => Fix Released ** Changed in: gdm (Ubuntu) Status: Invalid => Fix Released -- users with no password can't log in with gdm https://bugs.launchpad.net/bugs/104957 You rec

[Bug 104957] Re: users with no password can't log in with gdm

Nicolas François wrote on 2009-05-10: Why did you included the displays from 0 to 63? (Is 63 the maximum, or is it just meant to be mostly complete?) I had no idea about maximums - I was just following the existing pattern for ttyNN and vc/NN. But from what Steve Langasek wrote on 2009-08-19, th

Re: [Bug 104957] Re: users with no password can't log in with gdm

Thanks for agreeing with me on this case On Wed, 2009-08-19 at 20:14 +, Steve Langasek wrote: > Well in that case, I'm marking the gdm Ubuntu task as invalid. The > Debian shadow maintainer has agreed that /etc/securetty should mark > these X displays as trusted. This hasn't entirely been imp

[Bug 104957] Re: users with no password can't log in with gdm

I agree with Milan Bouchet-Valat, this has nothing to do with the upstream bug, and I did the tests over again and (my fault) using GDM the login fails in Karamic Alpha 3 (daily build). Bug 393854 offer a solution So I don't see a reason not to mark this bug confirmed. Please take acitons as neces

[Bug 104957] Re: users with no password can't log in with gdm

Well in that case, I'm marking the gdm Ubuntu task as invalid. The Debian shadow maintainer has agreed that /etc/securetty should mark these X displays as trusted. This hasn't entirely been implemented yet since fusa jumps straight to :20 as its next display number and /etc/securetty only goes up

[Bug 104957] Re: users with no password can't log in with gdm

Sorrry :( -- users with no password can't log in with gdm https://bugs.launchpad.net/bugs/104957 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/l

[Bug 104957] Re: users with no password can't log in with gdm

Please, be rigorous when performing tests. This bug is about logging in from GDM, not form the fast-user-switch-applet. They can perfectly use different policy files in /etc/pam.d, so they need to be treated separately. And i don't see how this could be related to your kernel version (securettys?).

[Bug 104957] Re: users with no password can't log in with gdm

This bug has nothing to do with kernels. The pam task is still open for the reason given in . Do not touch the status of this task ** Changed in: pam (Ubuntu) Status: Fix Released => Triaged ** Changed in: pam (Ubu

[Bug 104957] Re: users with no password can't log in with gdm

I tried the method by adding a user: useradd test and then from the switch user I went into test and was able to login without a password. This problem doesn't exist in the later kernels. Please update your kernel which will solve your problem and thanks for reporting this bug... ** Changed in: pa

[Bug 104957] Re: users with no password can't log in with gdm

the issue is fixed upstream now ** Changed in: gdm (Ubuntu) Status: Triaged => Fix Committed -- users with no password can't log in with gdm https://bugs.launchpad.net/bugs/104957 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -

[Bug 104957] Re: users with no password can't log in with gdm

** Changed in: gdm Status: Unknown => Fix Released -- users with no password can't log in with gdm https://bugs.launchpad.net/bugs/104957 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lis

[Bug 104957] Re: users with no password can't log in with gdm

the new comment clarify some things but the issue seems rather a policy decision rather than a packaging bug as you suggested -- users with no password can't log in with gdm https://bugs.launchpad.net/bugs/104957 You received this bug notification because you are a member of Ubuntu Bugs, which is

[Bug 104957] Re: users with no password can't log in with gdm

Sorry, I thought I had been explicit enough. The present bug deals with users with an empty password (using 'passwd -d'), while bug 393854 is about users actually having a password, but GDM not checking it to log in. In the present bug, GDM is handling the problem fine, we only need our PAM config

[Bug 104957] Re: users with no password can't log in with gdm

could you explain what is the packaging issue there then and how it's different from the other bug and the GNOME change you did? adding statements without explanations of the issue is not really constructive there -- users with no password can't log in with gdm https://bugs.launchpad.net/bugs/104

[Bug 104957] Re: users with no password can't log in with gdm

...except that the upstream bug linked here does not deal with the present problem at all, and never has. It is now marked as Fix Released since I committed patches for that, but these patches are not related to our problem which *is only in Ubuntu packaging*. Upstream has nothing to do with this a

[Bug 104957] Re: users with no password can't log in with gdm

there is no reason to no keep the upstream bug referenced there ** Changed in: gdm Importance: Undecided => Unknown ** Changed in: gdm Status: Invalid => Unknown ** Changed in: gdm Remote watch: None => GNOME Bug Tracker #414862 -- users with no password can't log in with gdm https:

[Bug 104957] Re: users with no password can't log in with gdm

See bug 393854 for a related approach of the problem of password-less logins. It suggests using accounts that actually have a password, but not to check it when logging with GDM. While this may not suit all cases described here, that can solve many of them. -- users with no password can't log in

[Bug 104957] Re: users with no password can't log in with gdm

BTW, the upstream bug in GDM has moved towards the solution I have described in my previous comment. As stated in this report, the present problem is in Debian/Ubuntu, not GDM. ** Changed in: gdm Importance: Unknown => Undecided ** Changed in: gdm Remote watch: GNOME Bug Tracker #414862 => No

[Bug 104957] Re: users with no password can't log in with gdm

** Changed in: shadow (Ubuntu) Importance: Undecided => Low ** Changed in: shadow (Ubuntu) Status: New => Confirmed ** Changed in: shadow (Ubuntu) Status: Confirmed => Triaged -- users with no password can't log in with gdm https://bugs.launchpad.net/bugs/104957 You received th

[Bug 104957] Re: users with no password can't log in with gdm

Agreed. Is this OK to mark shadow as Confirmed? I shall leave this in your more-than-capable hands then Steve, and sorry for the confusion. Thank you :) -- users with no password can't log in with gdm https://bugs.launchpad.net/bugs/104957 You received this bug notification because you are a memb

[Bug 104957] Re: users with no password can't log in with gdm

The 'incomplete' status is meant to indicate that more information is needed from the bug submitter. You appear to be asking for information from the developers... It's already been acknowledged by one of the shadow developers as a bug in that package. I'm still considering whether we should als

[Bug 104957] Re: users with no password can't log in with gdm

I realise that, but I was always told to set bugs to Incomplete status if asking for information, but it does look messy as "new" :) Should these be Confirmed then? -- users with no password can't log in with gdm https://bugs.launchpad.net/bugs/104957 You received this bug notification because yo

[Bug 104957] Re: users with no password can't log in with gdm

that's not an appropriate use of the 'incomplete' status. ** Changed in: shadow (Ubuntu) Status: Incomplete => New ** Changed in: pam (Ubuntu) Status: Incomplete => New -- users with no password can't log in with gdm https://bugs.launchpad.net/bugs/104957 You received this bug not

[Bug 104957] Re: users with no password can't log in with gdm

What status should pam and shadow be? Is this a bug in those packages? If so, please set these as Triaged too, and if not mark them Invalid - for now I shall mark these as Incomplete. Thank you guys. ** Changed in: pam (Ubuntu) Status: New => Incomplete ** Changed in: gdm (Baltix) S

[Bug 104957] Re: users with no password can't log in with gdm

I will add these lines to /etc/securetty in the next Debian package. Why did you included the displays from 0 to 63? (Is 63 the maximum, or is it just meant to be mostly complete?) If 63 is not the maximum, I would prefer to reduce the number of displays to a more reallistic value (i.e. I do not

Re: [Bug 104957] Re: users with no password can't log in with gdm

On Sun, May 10, 2009 at 05:32:33AM -, Flabdablet wrote: > 2009/5/9 Mantas Kriaučiūnas : > > way to solve password-less local login bug by adding lines bellow to > > /etc/shadow is correct > > They need to be added to /etc/securetty, not /etc/shadow. Yes, to /etc/securetty - this file is in lo

Re: [Bug 104957] Re: users with no password can't log in with gdm

2009/5/9 Mantas Kriaučiūnas : > I've assigned this bug to shadow (login) packages, because according to > latest comments from Flabdablet and steve.langa...@canonical.com the > way to solve password-less local login bug by adding lines bellow to > /etc/shadow is correct They need to be added to /

[Bug 104957] Re: users with no password can't log in with gdm

I've assigned this bug to shadow (login) packages, because according to latest comments from Flabdablet and steve.langa...@canonical.com the way to solve password-less local login bug by adding lines bellow to /etc/shadow is correct: # Local X displays :0 :0.0 :1 :1.0 :2 :2.0 :3 :3.0 ... :63 :63.

[Bug 104957] Re: users with no password can't log in with gdm

** Also affects: shadow (Ubuntu) Importance: Undecided Status: New -- users with no password can't log in with gdm https://bugs.launchpad.net/bugs/104957 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing l

Re: [Bug 104957] Re: users with no password can't log in with gdm

On Wed, Mar 4, 2009 at 10:25 AM, Steve Langasek wrote: > I don't know if the display names always belong to local X servers; > answering that question would go a long way to help resolve this bug. OK. I just tested this by turning on XDMCP on the desktop box (192.168.119.2), and logging in from

[Bug 104957] Re: users with no password can't log in with gdm

I don't know if the display names always belong to local X servers; answering that question would go a long way to help resolve this bug. It's definitely only insecure if you turn on XDMCP, though, so for your local use that should be fine. -- users with no password can't log in with gdm https:/

[Bug 104957] Re: users with no password can't log in with gdm

My Hardy desktop box has five user accounts, one of which (visitor) has no password. I can confirm that appending the following to /etc/securetty enables visitor to log in via GDM and successfully unlock gnome-screensaver and switch users. # X displays :0 :0.0 :20 :20.0 :21 :21.0 :22 :22.0 :23 :2

Re: [Bug 104957] Re: users with no password can't log in with gdm

On Thu, Jul 31, 2008 at 08:34:43AM -, Sebastien Bacher wrote: > > Do xdmcp and the standard greeter declare separate PAM service names? > not that I know no but I'm not a pam expert and you might want to look > at the code to make sure that's not the case The gdm code does the following to de

[Bug 104957] Re: users with no password can't log in with gdm

> Do xdmcp and the standard greeter declare separate PAM service names? not that I know no but I'm not a pam expert and you might want to look at the code to make sure that's not the case -- users with no password can't log in with gdm https://bugs.launchpad.net/bugs/104957 You received this bug

Re: [Bug 104957] Re: users with no password can't log in with gdm

On Wed, Jul 30, 2008 at 10:13:01PM -, Sebastien Bacher wrote: > the xdmcp browser and standard login greeter are different interface so > it would probably be possible to special cases non password local logins > if somebody really wants to work on this nonsecure option Do xdmcp and the standa

[Bug 104957] Re: users with no password can't log in with gdm

the xdmcp browser and standard login greeter are different interface so it would probably be possible to special cases non password local logins if somebody really wants to work on this nonsecure option -- users with no password can't log in with gdm https://bugs.launchpad.net/bugs/104957 You rec

[Bug 104957] Re: users with no password can't log in with gdm

The other way to fix this, rather than disabling nullok_secure (which isn't a good idea as a default), would be to add your X console to /etc/securetty. Can someone test and confirm that this works? I'm not sure whether doing that by default would be a good idea, either, from a security standpoin

[Bug 104957] Re: users with no password can't log in with gdm

I haven't tested Zealot's fix yet, but it looks promising. The man page for pam_unix has the following to say about the nullok_secure option that is used in /etc/pam.d/common-auth: The default action of this module is to not permit the user access to a service if their official password is blank

[Bug 104957] Re: users with no password can't log in with gdm

by the way, you'd better also edit /etc/pam.d/xscreensaver, or you could not unlock the window if screensaver started. -- users with no password can't log in with gdm https://bugs.launchpad.net/bugs/104957 You received this bug notification because you are a member of Ubuntu Bugs, which is the bu

[Bug 104957] Re: users with no password can't log in with gdm

It is not gdm issue, you can easily fix it by edit /etc/pam.d/gdm replace this line: @include common-auth with authrequiredpam_unix.so nullok Because common-auth will check if the login user has a tty when empty password is provide. But you can not get a tty from gdm login window. -

[Bug 104957] Re: users with no password can't log in with gdm

This is untested, but the problem might be this: pam-0.79/Linux-PAM/modules/pam_unix/support.c: _unix_blankpasswd contains the following: if ((retval == 1) && on(UNIX_NULLOK_SECURE, ctrl)) { int retval2; const char *uttyname; retval2 = pam_g

[Bug 104957] Re: users with no password can't log in with gdm

Isn't this a PAM bug? I get the same result as Kristian Erik Hermansen above, namely that login is rejected by pam_securetty. However, I do not quite see why pam_securetty should be run. > grep -r pam_securetty /etc/pam.d /etc/pam.d/login:auth requisite pam_securetty.so So, if I am not mi

[Bug 104957] Re: users with no password can't log in with gdm

** Also affects: gdm (Baltix) Importance: Undecided Status: New -- users with no password can't log in with gdm https://bugs.launchpad.net/bugs/104957 You received this bug notification because you are a member of Ubuntu Bugs, which is the bug contact for Ubuntu. -- ubuntu-bugs mailin

[Bug 104957] Re: users with no password can't log in with gdm

** Changed in: gdm (Ubuntu) Status: Confirmed => Triaged -- users with no password can't log in with gdm https://bugs.launchpad.net/bugs/104957 You received this bug notification because you are a member of Ubuntu Bugs, which is the bug contact for Ubuntu. -- ubuntu-bugs mailing list ubu

[Bug 104957] Re: users with no password can't log in with gdm

** Changed in: gdm (upstream) Status: Unknown => Unconfirmed -- users with no password can't log in with gdm https://bugs.launchpad.net/bugs/104957 You received this bug notification because you are a member of Ubuntu Bugs, which is the bug contact for Ubuntu. -- ubuntu-bugs mailing list

[Bug 104957] Re: users with no password can't log in with gdm

that's know upstream: http://bugzilla.gnome.org/show_bug.cgi?id=414862 ** Changed in: gdm (Ubuntu) Importance: Undecided => Wishlist Assignee: (unassigned) => Ubuntu Desktop Bugs ** Bug watch added: GNOME Bug Tracker #414862 http://bugzilla.gnome.org/show_bug.cgi?id=414862 ** Also aff

[Bug 104957] Re: users with no password can't log in with gdm

Confirmed in gdm 2.18.0-0ubuntu4. /var/log/auth.log provides insight. I tested this with a user account named peter. Results below on attempted GDM login... Apr 9 23:59:04 khermans-laptop gdm[9757]: (pam_securetty) access denied: tty ':20' is not secure ! Apr 9 23:59:04 khermans-laptop gdm[9

[Bug 104957] Re: users with no password can't log in with gdm

** Attachment added: "Dependencies.txt" http://librarian.launchpad.net/7228877/Dependencies.txt ** Attachment added: "ProcMaps.txt" http://librarian.launchpad.net/7228878/ProcMaps.txt ** Attachment added: "ProcStatus.txt" http://librarian.launchpad.net/7228879/ProcStatus.txt -- users