[Bug 104957] Re: users with no password can't log in with gdm

2009-05-09 Thread Mantas Kriaučiūnas
** Also affects: shadow (Ubuntu)
   Importance: Undecided
   Status: New

-- 
users with no password can't log in with gdm
https://bugs.launchpad.net/bugs/104957
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 104957] Re: users with no password can't log in with gdm

2009-05-09 Thread Mantas Kriaučiūnas
I've assigned this bug to shadow (login) packages, because according to
latest comments from Flabdablet  and steve.langa...@canonical.com the
way to solve password-less local login bug by adding lines bellow to
/etc/shadow is correct:

# Local X displays
:0
:0.0
:1
:1.0
:2
:2.0
:3
:3.0
...
:63
:63.0

-- 
users with no password can't log in with gdm
https://bugs.launchpad.net/bugs/104957
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 104957] Re: users with no password can't log in with gdm

2009-05-10 Thread Nicolas François
I will add these lines to /etc/securetty in the next Debian package.

Why did you included the displays from 0 to 63? (Is 63 the maximum, or is it 
just meant to be mostly complete?)
If 63 is not the maximum, I would prefer to reduce the number of displays to a 
more reallistic value (i.e. I do not expect so many displays on systems were 
empty passwords are allowed), but maybe also add support for systems with 
multiple heads (i.e. also support :0.1).


I submitted http://bugs.debian.org/528015 to update the documentation or 
securetty, since this usage is quite different from what is currently 
documented.

** Bug watch added: Debian Bug tracker #528015
   http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=528015

-- 
users with no password can't log in with gdm
https://bugs.launchpad.net/bugs/104957
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 104957] Re: users with no password can't log in with gdm

2009-07-16 Thread Bug Watch Updater
** Changed in: gdm
   Status: Unknown => Fix Released

-- 
users with no password can't log in with gdm
https://bugs.launchpad.net/bugs/104957
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 104957] Re: users with no password can't log in with gdm

2009-07-16 Thread Sebastien Bacher
the issue is fixed upstream now

** Changed in: gdm (Ubuntu)
   Status: Triaged => Fix Committed

-- 
users with no password can't log in with gdm
https://bugs.launchpad.net/bugs/104957
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 104957] Re: users with no password can't log in with gdm

2009-03-03 Thread Flabdablet
My Hardy desktop box has five user accounts, one of which (visitor) has
no password.  I can confirm that appending the following to
/etc/securetty enables visitor to log in via GDM and successfully unlock
gnome-screensaver and switch users.

# X displays
:0
:0.0
:20
:20.0
:21
:21.0
:22
:22.0
:23
:23.0
:24
:24.0

Do display names in this form always belong to local X servers?  If so,
including a bunch of them in /etc/securetty is probably the Right Thing.

I can also confirm that leaving /etc/securetty unmolested and doing the
following instead gets the job done too:

$ cd /etc/pam.d
$ sudo cp common-auth common-auth-loose
$ sudo sed -i s/nullok_secure/nullok/ common-auth-loose
$ sudo sed -i s/common-auth/common-auth-loose/ gdm gnome-screensaver

Is this all kinds of insecure as it stands, or only if I turn on XDMCP?

-- 
users with no password can't log in with gdm
https://bugs.launchpad.net/bugs/104957
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 104957] Re: users with no password can't log in with gdm

2009-03-03 Thread Steve Langasek
I don't know if the display names always belong to local X servers;
answering that question would go a long way to help resolve this bug.

It's definitely only insecure if you turn on XDMCP, though, so for your
local use that should be fine.

-- 
users with no password can't log in with gdm
https://bugs.launchpad.net/bugs/104957
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 104957] Re: users with no password can't log in with gdm

2009-06-30 Thread Milan Bouchet-Valat
BTW, the upstream bug in GDM has moved towards the solution I have
described in my previous comment. As stated in this report, the present
problem is in Debian/Ubuntu, not GDM.

** Changed in: gdm
   Importance: Unknown => Undecided

** Changed in: gdm
 Remote watch: GNOME Bug Tracker #414862 => None

** Changed in: gdm
   Status: New => Invalid

-- 
users with no password can't log in with gdm
https://bugs.launchpad.net/bugs/104957
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 104957] Re: users with no password can't log in with gdm

2009-06-30 Thread Milan Bouchet-Valat
See bug 393854 for a related approach of the problem of password-less
logins. It suggests using accounts that actually have a password, but
not to check it when logging with GDM. While this may not suit all cases
described here, that can solve many of them.

-- 
users with no password can't log in with gdm
https://bugs.launchpad.net/bugs/104957
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 104957] Re: users with no password can't log in with gdm

2009-06-30 Thread Sebastien Bacher
there is no reason to no keep the upstream bug referenced there

** Changed in: gdm
   Importance: Undecided => Unknown

** Changed in: gdm
   Status: Invalid => Unknown

** Changed in: gdm
 Remote watch: None => GNOME Bug Tracker #414862

-- 
users with no password can't log in with gdm
https://bugs.launchpad.net/bugs/104957
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 104957] Re: users with no password can't log in with gdm

2009-07-01 Thread Milan Bouchet-Valat
...except that the upstream bug linked here does not deal with the
present problem at all, and never has. It is now marked as Fix Released
since I committed patches for that, but these patches are not related to
our problem which *is only in Ubuntu packaging*. Upstream has nothing to
do with this at all.

-- 
users with no password can't log in with gdm
https://bugs.launchpad.net/bugs/104957
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 104957] Re: users with no password can't log in with gdm

2009-07-01 Thread Sebastien Bacher
could you explain what is the packaging issue there then and how it's
different from the other bug and the GNOME change you did? adding
statements without explanations of the issue is not really constructive
there

-- 
users with no password can't log in with gdm
https://bugs.launchpad.net/bugs/104957
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 104957] Re: users with no password can't log in with gdm

2009-07-01 Thread Milan Bouchet-Valat
Sorry, I thought I had been explicit enough.

The present bug deals with users with an empty password (using 'passwd
-d'), while bug 393854 is about users actually having a password, but
GDM not checking it to log in. In the present bug, GDM is handling the
problem fine, we only need our PAM config files allow for empty password
on graphical ttys: for now, they are not considered as secure ttys,
while they should (above discussion). In the other bug, we need our PAM
config file for GDM to allow members of the nopasswdlogin group to log
in without any further authentication.

So nothing related in the way we should fix those, while they target
related use cases. Hope this helps.

-- 
users with no password can't log in with gdm
https://bugs.launchpad.net/bugs/104957
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 104957] Re: users with no password can't log in with gdm

2009-07-01 Thread Sebastien Bacher
the new comment clarify some things but the issue seems rather a policy
decision rather than a packaging bug as you suggested

-- 
users with no password can't log in with gdm
https://bugs.launchpad.net/bugs/104957
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 104957] Re: users with no password can't log in with gdm

2009-06-02 Thread Teej
What status should pam and shadow be? Is this a bug in those packages?
If so, please set these as Triaged too, and if not mark them Invalid -
for now I shall mark these as Incomplete. Thank you guys.

** Changed in: pam (Ubuntu)
   Status: New => Incomplete

** Changed in: gdm (Baltix)
   Status: New => Incomplete

** Changed in: shadow (Ubuntu)
   Status: New => Incomplete

-- 
users with no password can't log in with gdm
https://bugs.launchpad.net/bugs/104957
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 104957] Re: users with no password can't log in with gdm

2009-06-02 Thread Steve Langasek
that's not an appropriate use of the 'incomplete' status.

** Changed in: shadow (Ubuntu)
   Status: Incomplete => New

** Changed in: pam (Ubuntu)
   Status: Incomplete => New

-- 
users with no password can't log in with gdm
https://bugs.launchpad.net/bugs/104957
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 104957] Re: users with no password can't log in with gdm

2009-06-02 Thread Teej
I realise that, but I was always told to set bugs to Incomplete status
if asking for information, but it does look messy as "new" :) Should
these be Confirmed then?

-- 
users with no password can't log in with gdm
https://bugs.launchpad.net/bugs/104957
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 104957] Re: users with no password can't log in with gdm

2009-06-02 Thread Steve Langasek
The 'incomplete' status is meant to indicate that more information is
needed from the bug submitter.  You appear to be asking for information
from the developers...

It's already been acknowledged by one of the shadow developers as a bug
in that package.  I'm still considering whether we should also treat
this as a bug in pam for not having a sensible wildcard format for
/etc/securetty.

-- 
users with no password can't log in with gdm
https://bugs.launchpad.net/bugs/104957
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 104957] Re: users with no password can't log in with gdm

2009-06-02 Thread Teej
Agreed. Is this OK to mark shadow as Confirmed? I shall leave this in
your more-than-capable hands then Steve, and sorry for the confusion.
Thank you :)

-- 
users with no password can't log in with gdm
https://bugs.launchpad.net/bugs/104957
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 104957] Re: users with no password can't log in with gdm

2009-06-02 Thread Steve Langasek
** Changed in: shadow (Ubuntu)
   Importance: Undecided => Low

** Changed in: shadow (Ubuntu)
   Status: New => Confirmed

** Changed in: shadow (Ubuntu)
   Status: Confirmed => Triaged

-- 
users with no password can't log in with gdm
https://bugs.launchpad.net/bugs/104957
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 104957] Re: users with no password can't log in with gdm

2009-08-19 Thread Vikram
I tried the method by adding a user: useradd test and then from the
switch user I went into test and was able to login without a password.
This problem doesn't exist in the later kernels. Please update your
kernel which will solve your problem and thanks for reporting this
bug...

** Changed in: pam (Ubuntu)
   Status: New => Fix Released

** Changed in: pam (Ubuntu)
 Assignee: (unassigned) => Vikram (dhillon-v10)

-- 
users with no password can't log in with gdm
https://bugs.launchpad.net/bugs/104957
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 104957] Re: users with no password can't log in with gdm

2009-08-19 Thread Steve Langasek
This bug has nothing to do with kernels.  The pam task is still open for
the reason given in
.
Do not touch the status of this task

** Changed in: pam (Ubuntu)
   Status: Fix Released => Triaged

** Changed in: pam (Ubuntu)
 Assignee: Vikram (dhillon-v10) => (unassigned)

-- 
users with no password can't log in with gdm
https://bugs.launchpad.net/bugs/104957
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 104957] Re: users with no password can't log in with gdm

2009-08-19 Thread Milan Bouchet-Valat
Please, be rigorous when performing tests. This bug is about logging in
from GDM, not form the fast-user-switch-applet. They can perfectly use
different policy files in /etc/pam.d, so they need to be treated
separately. And i don't see how this could be related to your kernel
version (securettys?).

I'm reopening this bug waiting for somebody to test this in Karmic. And
BTW, as I said, the upstream bug has nothing to do with the current
problem, so I'm removing the link.

** Changed in: gdm
   Importance: Unknown => Undecided

** Changed in: gdm
   Status: Fix Released => New

** Changed in: gdm
 Remote watch: GNOME Bug Tracker #414862 => None

-- 
users with no password can't log in with gdm
https://bugs.launchpad.net/bugs/104957
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 104957] Re: users with no password can't log in with gdm

2009-08-19 Thread Vikram
Sorrry :(

-- 
users with no password can't log in with gdm
https://bugs.launchpad.net/bugs/104957
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 104957] Re: users with no password can't log in with gdm

2009-08-19 Thread Steve Langasek
Well in that case, I'm marking the gdm Ubuntu task as invalid.  The
Debian shadow maintainer has agreed that /etc/securetty should mark
these X displays as trusted. This hasn't entirely been implemented yet
since fusa jumps straight to :20 as its next display number and
/etc/securetty only goes up to :3 currently, so this still needs to be
implemented (either by supporting wildcards in pam or by listing out all
the displays in /etc/securetty), but in either case no code can or
should be changed in gdm for this.

** Changed in: gdm (Ubuntu)
   Status: Fix Committed => Invalid

** Changed in: pam (Ubuntu)
   Importance: Undecided => Medium

-- 
users with no password can't log in with gdm
https://bugs.launchpad.net/bugs/104957
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 104957] Re: users with no password can't log in with gdm

2009-08-19 Thread Vikram
I agree with Milan Bouchet-Valat, this has nothing to do with the
upstream bug, and I did the tests over again and (my fault) using GDM
the login fails in Karamic Alpha 3 (daily build). Bug 393854 offer a
solution  So I don't see a reason not to mark this bug confirmed. Please
take acitons as necessary.

Thanks,
Vikram

-- 
users with no password can't log in with gdm
https://bugs.launchpad.net/bugs/104957
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 104957] Re: users with no password can't log in with gdm

2007-10-10 Thread Mantas Kriaučiūnas
** Also affects: gdm (Baltix)
   Importance: Undecided
   Status: New

-- 
users with no password can't log in with gdm
https://bugs.launchpad.net/bugs/104957
You received this bug notification because you are a member of Ubuntu
Bugs, which is the bug contact for Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 104957] Re: users with no password can't log in with gdm

2007-10-10 Thread Philipp Kohlbecher
Isn't this a PAM bug?

I get the same result as Kristian Erik Hermansen above, namely that
login is rejected by pam_securetty. However, I do not quite see why
pam_securetty should be run.

> grep -r pam_securetty /etc/pam.d
/etc/pam.d/login:auth   requisite  pam_securetty.so

So, if I am not mistaken, pam_securetty should only be run for the "login" 
service, not for gdm.
Also, /usr/share/doc/libpam-doc/html/pam-6.html#ss6.23 states for the 
pam_securetty module: "Provides standard Unix securetty checking, which causes 
authentication for root to fail unless PAM_TTY is set to a string listed in the 
/etc/securetty file. For all other users, it succeeds."

So pam_securetty should not be run at all, and it should certainly not
fail.

** Also affects: pam (Ubuntu)
   Importance: Undecided
   Status: New

-- 
users with no password can't log in with gdm
https://bugs.launchpad.net/bugs/104957
You received this bug notification because you are a member of Ubuntu
Bugs, which is the bug contact for Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 104957] Re: users with no password can't log in with gdm

2007-10-10 Thread Philipp Kohlbecher
This is untested, but the problem might be this:

pam-0.79/Linux-PAM/modules/pam_unix/support.c: _unix_blankpasswd
contains the following:

if ((retval == 1) && on(UNIX_NULLOK_SECURE, ctrl)) {
int retval2;
const char *uttyname;
retval2 = pam_get_item(pamh, PAM_TTY, (const void **)&uttyname);
if (retval2 != PAM_SUCCESS || uttyname == NULL)
return 0;

if (_pammodutil_tty_secure(uttyname) != PAM_SUCCESS)
return 0;
}

It appears that the tty is always checked if the password is blank.
Can anybody confirm that this is, in fact, the problem? Why is this check 
performed?

-- 
users with no password can't log in with gdm
https://bugs.launchpad.net/bugs/104957
You received this bug notification because you are a member of Ubuntu
Bugs, which is the bug contact for Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 104957] Re: users with no password can't log in with gdm

2007-08-08 Thread Sebastien Bacher
** Changed in: gdm (Ubuntu)
   Status: Confirmed => Triaged

-- 
users with no password can't log in with gdm
https://bugs.launchpad.net/bugs/104957
You received this bug notification because you are a member of Ubuntu
Bugs, which is the bug contact for Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 104957] Re: users with no password can't log in with gdm

2008-01-29 Thread Zealot
by the way, you'd better also edit /etc/pam.d/xscreensaver, or you could
not unlock the window if screensaver started.

-- 
users with no password can't log in with gdm
https://bugs.launchpad.net/bugs/104957
You received this bug notification because you are a member of Ubuntu
Bugs, which is the bug contact for Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 104957] Re: users with no password can't log in with gdm

2008-01-29 Thread Zealot
It is not gdm issue, you can easily fix it by edit /etc/pam.d/gdm

replace this line:
@include common-auth
with
authrequiredpam_unix.so nullok

Because common-auth will check if the login user has a tty when empty password 
is provide.
But you can not get a tty from gdm login window.

-- 
users with no password can't log in with gdm
https://bugs.launchpad.net/bugs/104957
You received this bug notification because you are a member of Ubuntu
Bugs, which is the bug contact for Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 104957] Re: users with no password can't log in with gdm

2008-01-29 Thread Philipp Kohlbecher
I haven't tested Zealot's fix yet, but it looks promising.

The man page for pam_unix has the following to say about the nullok_secure 
option that is used in /etc/pam.d/common-auth:
The default action of this module is to not permit the user access to a service 
if their official password is blank. The nullok_secure argument overrides this 
default and allows any user with a blank password to access the service as long 
as the value of PAM_TTY is set to one of the values found in /etc/securetty.

Thus, the behavior of the module is as documented; it's a feature, not a
bug! =)

So, the only possible fix would be changing nullok_secure to nullok as
per Zealot's fix above (or globally in /etc/pam.d/common-auth). I do not
know enough about the security implications of such a change to tell
whether it would be a good idea in a default install, so I am leaving
this open for now.

-- 
users with no password can't log in with gdm
https://bugs.launchpad.net/bugs/104957
You received this bug notification because you are a member of Ubuntu
Bugs, which is the bug contact for Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 104957] Re: users with no password can't log in with gdm

2007-04-12 Thread Sebastien Bacher
that's know upstream: http://bugzilla.gnome.org/show_bug.cgi?id=414862

** Changed in: gdm (Ubuntu)
   Importance: Undecided => Wishlist
 Assignee: (unassigned) => Ubuntu Desktop Bugs

** Bug watch added: GNOME Bug Tracker #414862
   http://bugzilla.gnome.org/show_bug.cgi?id=414862

** Also affects: gdm (upstream) via
   http://bugzilla.gnome.org/show_bug.cgi?id=414862
   Importance: Unknown
   Status: Unknown

-- 
users with no password can't log in with gdm
https://bugs.launchpad.net/bugs/104957
You received this bug notification because you are a member of Ubuntu
Bugs, which is the bug contact for Ubuntu.

-- 
ubuntu-bugs mailing list
[EMAIL PROTECTED]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 104957] Re: users with no password can't log in with gdm

2007-04-13 Thread Bug Watch Updater
** Changed in: gdm (upstream)
   Status: Unknown => Unconfirmed

-- 
users with no password can't log in with gdm
https://bugs.launchpad.net/bugs/104957
You received this bug notification because you are a member of Ubuntu
Bugs, which is the bug contact for Ubuntu.

-- 
ubuntu-bugs mailing list
[EMAIL PROTECTED]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 104957] Re: users with no password can't log in with gdm

2007-04-09 Thread Tomi

** Attachment added: "Dependencies.txt"
   http://librarian.launchpad.net/7228877/Dependencies.txt

** Attachment added: "ProcMaps.txt"
   http://librarian.launchpad.net/7228878/ProcMaps.txt

** Attachment added: "ProcStatus.txt"
   http://librarian.launchpad.net/7228879/ProcStatus.txt

-- 
users with no password can't log in with gdm
https://bugs.launchpad.net/bugs/104957
You received this bug notification because you are a member of Ubuntu
Bugs, which is the bug contact for Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 104957] Re: users with no password can't log in with gdm

2007-04-09 Thread Kristian Hermansen
Confirmed in gdm 2.18.0-0ubuntu4.

/var/log/auth.log provides insight.  I tested this with a user account
named peter.  Results below on attempted GDM login...

Apr  9 23:59:04 khermans-laptop gdm[9757]: (pam_securetty) access denied: tty 
':20' is not secure !
Apr  9 23:59:04 khermans-laptop gdm[9757]: (pam_securetty) access denied: tty 
':20' is not secure !
Apr  9 23:59:04 khermans-laptop gdm[9757]: (pam_unix) authentication failure; 
logname= uid=0 euid=0 tty=:20 ruser= rhost=  user=peter

** Changed in: gdm (Ubuntu)
   Status: Unconfirmed => Confirmed

-- 
users with no password can't log in with gdm
https://bugs.launchpad.net/bugs/104957
You received this bug notification because you are a member of Ubuntu
Bugs, which is the bug contact for Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 104957] Re: users with no password can't log in with gdm

2008-07-29 Thread Steve Langasek
The other way to fix this, rather than disabling nullok_secure (which
isn't a good idea as a default), would be to add your X console to
/etc/securetty.  Can someone test and confirm that this works?

I'm not sure whether doing that by default would be a good idea, either,
from a security standpoint.  I think we would want to be able to
distinguish local X sessions from XDMCP sessions for such a change, and
I'm not sure how that's possible.  Sebastien, perhaps you have some
thoughts on this?

-- 
users with no password can't log in with gdm
https://bugs.launchpad.net/bugs/104957
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 104957] Re: users with no password can't log in with gdm

2008-07-30 Thread Sebastien Bacher
the xdmcp browser and standard login greeter are different interface so
it would probably be possible to special cases non password local logins
if somebody really wants to work on this nonsecure option

-- 
users with no password can't log in with gdm
https://bugs.launchpad.net/bugs/104957
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 104957] Re: users with no password can't log in with gdm

2008-07-31 Thread Sebastien Bacher
> Do xdmcp and the standard greeter declare separate PAM service names?

not that I know no but I'm not a pam expert and you might want to look
at the code to make sure that's not the case

-- 
users with no password can't log in with gdm
https://bugs.launchpad.net/bugs/104957
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 104957] Re: users with no password can't log in with gdm

2009-08-20 Thread Flabdablet
Nicolas François  wrote on 2009-05-10:

Why did you included the displays from 0 to 63? (Is 63 the maximum, or
is it just meant to be mostly complete?)

I had no idea about maximums - I was just following the existing pattern
for ttyNN and vc/NN. But from what Steve Langasek wrote on 2009-08-19,
the instinct seems sound :-)

-- 
users with no password can't log in with gdm
https://bugs.launchpad.net/bugs/104957
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 104957] Re: users with no password can't log in with gdm

2008-07-29 Thread Steve Langasek
The other way to fix this, rather than disabling nullok_secure (which
isn't a good idea as a default), would be to add your X console to
/etc/securetty.  Can someone test and confirm that this works?

I'm not sure whether doing that by default would be a good idea, either,
from a security standpoint.  I think we would want to be able to
distinguish local X sessions from XDMCP sessions for such a change, and
I'm not sure how that's possible.  Sebastien, perhaps you have some
thoughts on this?

-- 
users with no password can't log in with gdm
https://bugs.launchpad.net/bugs/104957
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 104957] Re: users with no password can't log in with gdm

2008-07-30 Thread Sebastien Bacher
the xdmcp browser and standard login greeter are different interface so
it would probably be possible to special cases non password local logins
if somebody really wants to work on this nonsecure option

-- 
users with no password can't log in with gdm
https://bugs.launchpad.net/bugs/104957
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 104957] Re: users with no password can't log in with gdm

2008-07-31 Thread Sebastien Bacher
> Do xdmcp and the standard greeter declare separate PAM service names?

not that I know no but I'm not a pam expert and you might want to look
at the code to make sure that's not the case

-- 
users with no password can't log in with gdm
https://bugs.launchpad.net/bugs/104957
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 104957] Re: users with no password can't log in with gdm

2007-08-08 Thread Sebastien Bacher
** Changed in: gdm (Ubuntu)
   Status: Confirmed => Triaged

-- 
users with no password can't log in with gdm
https://bugs.launchpad.net/bugs/104957
You received this bug notification because you are a member of Ubuntu
Bugs, which is the bug contact for Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 104957] Re: users with no password can't log in with gdm

2008-01-29 Thread Zealot
by the way, you'd better also edit /etc/pam.d/xscreensaver, or you could
not unlock the window if screensaver started.

-- 
users with no password can't log in with gdm
https://bugs.launchpad.net/bugs/104957
You received this bug notification because you are a member of Ubuntu
Bugs, which is the bug contact for Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 104957] Re: users with no password can't log in with gdm

2008-01-29 Thread Zealot
It is not gdm issue, you can easily fix it by edit /etc/pam.d/gdm

replace this line:
@include common-auth
with
authrequiredpam_unix.so nullok

Because common-auth will check if the login user has a tty when empty password 
is provide.
But you can not get a tty from gdm login window.

-- 
users with no password can't log in with gdm
https://bugs.launchpad.net/bugs/104957
You received this bug notification because you are a member of Ubuntu
Bugs, which is the bug contact for Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 104957] Re: users with no password can't log in with gdm

2008-01-29 Thread Philipp Kohlbecher
I haven't tested Zealot's fix yet, but it looks promising.

The man page for pam_unix has the following to say about the nullok_secure 
option that is used in /etc/pam.d/common-auth:
The default action of this module is to not permit the user access to a service 
if their official password is blank. The nullok_secure argument overrides this 
default and allows any user with a blank password to access the service as long 
as the value of PAM_TTY is set to one of the values found in /etc/securetty.

Thus, the behavior of the module is as documented; it's a feature, not a
bug! =)

So, the only possible fix would be changing nullok_secure to nullok as
per Zealot's fix above (or globally in /etc/pam.d/common-auth). I do not
know enough about the security implications of such a change to tell
whether it would be a good idea in a default install, so I am leaving
this open for now.

-- 
users with no password can't log in with gdm
https://bugs.launchpad.net/bugs/104957
You received this bug notification because you are a member of Ubuntu
Bugs, which is the bug contact for Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 104957] Re: users with no password can't log in with gdm

2009-05-10 Thread Nicolas François
I will add these lines to /etc/securetty in the next Debian package.

Why did you included the displays from 0 to 63? (Is 63 the maximum, or is it 
just meant to be mostly complete?)
If 63 is not the maximum, I would prefer to reduce the number of displays to a 
more reallistic value (i.e. I do not expect so many displays on systems were 
empty passwords are allowed), but maybe also add support for systems with 
multiple heads (i.e. also support :0.1).


I submitted http://bugs.debian.org/528015 to update the documentation or 
securetty, since this usage is quite different from what is currently 
documented.

** Bug watch added: Debian Bug tracker #528015
   http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=528015

-- 
users with no password can't log in with gdm
https://bugs.launchpad.net/bugs/104957
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 104957] Re: users with no password can't log in with gdm

2009-07-16 Thread Bug Watch Updater
** Changed in: gdm
   Status: Unknown => Fix Released

-- 
users with no password can't log in with gdm
https://bugs.launchpad.net/bugs/104957
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 104957] Re: users with no password can't log in with gdm

2009-07-16 Thread Sebastien Bacher
the issue is fixed upstream now

** Changed in: gdm (Ubuntu)
   Status: Triaged => Fix Committed

-- 
users with no password can't log in with gdm
https://bugs.launchpad.net/bugs/104957
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 104957] Re: users with no password can't log in with gdm

2009-05-09 Thread Mantas Kriaučiūnas
** Also affects: shadow (Ubuntu)
   Importance: Undecided
   Status: New

-- 
users with no password can't log in with gdm
https://bugs.launchpad.net/bugs/104957
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 104957] Re: users with no password can't log in with gdm

2009-05-09 Thread Mantas Kriaučiūnas
I've assigned this bug to shadow (login) packages, because according to
latest comments from Flabdablet  and steve.langa...@canonical.com the
way to solve password-less local login bug by adding lines bellow to
/etc/shadow is correct:

# Local X displays
:0
:0.0
:1
:1.0
:2
:2.0
:3
:3.0
...
:63
:63.0

-- 
users with no password can't log in with gdm
https://bugs.launchpad.net/bugs/104957
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 104957] Re: users with no password can't log in with gdm

2009-03-03 Thread Flabdablet
My Hardy desktop box has five user accounts, one of which (visitor) has
no password.  I can confirm that appending the following to
/etc/securetty enables visitor to log in via GDM and successfully unlock
gnome-screensaver and switch users.

# X displays
:0
:0.0
:20
:20.0
:21
:21.0
:22
:22.0
:23
:23.0
:24
:24.0

Do display names in this form always belong to local X servers?  If so,
including a bunch of them in /etc/securetty is probably the Right Thing.

I can also confirm that leaving /etc/securetty unmolested and doing the
following instead gets the job done too:

$ cd /etc/pam.d
$ sudo cp common-auth common-auth-loose
$ sudo sed -i s/nullok_secure/nullok/ common-auth-loose
$ sudo sed -i s/common-auth/common-auth-loose/ gdm gnome-screensaver

Is this all kinds of insecure as it stands, or only if I turn on XDMCP?

-- 
users with no password can't log in with gdm
https://bugs.launchpad.net/bugs/104957
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 104957] Re: users with no password can't log in with gdm

2009-03-03 Thread Steve Langasek
I don't know if the display names always belong to local X servers;
answering that question would go a long way to help resolve this bug.

It's definitely only insecure if you turn on XDMCP, though, so for your
local use that should be fine.

-- 
users with no password can't log in with gdm
https://bugs.launchpad.net/bugs/104957
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 104957] Re: users with no password can't log in with gdm

2009-03-03 Thread Flabdablet
My Hardy desktop box has five user accounts, one of which (visitor) has
no password.  I can confirm that appending the following to
/etc/securetty enables visitor to log in via GDM and successfully unlock
gnome-screensaver and switch users.

# X displays
:0
:0.0
:20
:20.0
:21
:21.0
:22
:22.0
:23
:23.0
:24
:24.0

Do display names in this form always belong to local X servers?  If so,
including a bunch of them in /etc/securetty is probably the Right Thing.

I can also confirm that leaving /etc/securetty unmolested and doing the
following instead gets the job done too:

$ cd /etc/pam.d
$ sudo cp common-auth common-auth-loose
$ sudo sed -i s/nullok_secure/nullok/ common-auth-loose
$ sudo sed -i s/common-auth/common-auth-loose/ gdm gnome-screensaver

Is this all kinds of insecure as it stands, or only if I turn on XDMCP?

-- 
users with no password can't log in with gdm
https://bugs.launchpad.net/bugs/104957
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 104957] Re: users with no password can't log in with gdm

2009-03-03 Thread Steve Langasek
I don't know if the display names always belong to local X servers;
answering that question would go a long way to help resolve this bug.

It's definitely only insecure if you turn on XDMCP, though, so for your
local use that should be fine.

-- 
users with no password can't log in with gdm
https://bugs.launchpad.net/bugs/104957
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 104957] Re: users with no password can't log in with gdm

2007-10-10 Thread Mantas Kriaučiūnas
** Also affects: gdm (Baltix)
   Importance: Undecided
   Status: New

-- 
users with no password can't log in with gdm
https://bugs.launchpad.net/bugs/104957
You received this bug notification because you are a member of Ubuntu
Bugs, which is the bug contact for Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 104957] Re: users with no password can't log in with gdm

2007-10-10 Thread Philipp Kohlbecher
Isn't this a PAM bug?

I get the same result as Kristian Erik Hermansen above, namely that
login is rejected by pam_securetty. However, I do not quite see why
pam_securetty should be run.

> grep -r pam_securetty /etc/pam.d
/etc/pam.d/login:auth   requisite  pam_securetty.so

So, if I am not mistaken, pam_securetty should only be run for the "login" 
service, not for gdm.
Also, /usr/share/doc/libpam-doc/html/pam-6.html#ss6.23 states for the 
pam_securetty module: "Provides standard Unix securetty checking, which causes 
authentication for root to fail unless PAM_TTY is set to a string listed in the 
/etc/securetty file. For all other users, it succeeds."

So pam_securetty should not be run at all, and it should certainly not
fail.

** Also affects: pam (Ubuntu)
   Importance: Undecided
   Status: New

-- 
users with no password can't log in with gdm
https://bugs.launchpad.net/bugs/104957
You received this bug notification because you are a member of Ubuntu
Bugs, which is the bug contact for Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 104957] Re: users with no password can't log in with gdm

2007-10-10 Thread Philipp Kohlbecher
This is untested, but the problem might be this:

pam-0.79/Linux-PAM/modules/pam_unix/support.c: _unix_blankpasswd
contains the following:

if ((retval == 1) && on(UNIX_NULLOK_SECURE, ctrl)) {
int retval2;
const char *uttyname;
retval2 = pam_get_item(pamh, PAM_TTY, (const void **)&uttyname);
if (retval2 != PAM_SUCCESS || uttyname == NULL)
return 0;

if (_pammodutil_tty_secure(uttyname) != PAM_SUCCESS)
return 0;
}

It appears that the tty is always checked if the password is blank.
Can anybody confirm that this is, in fact, the problem? Why is this check 
performed?

-- 
users with no password can't log in with gdm
https://bugs.launchpad.net/bugs/104957
You received this bug notification because you are a member of Ubuntu
Bugs, which is the bug contact for Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 104957] Re: users with no password can't log in with gdm

2009-07-16 Thread Bug Watch Updater
** Changed in: gdm
   Status: Unknown => Fix Released

-- 
users with no password can't log in with gdm
https://bugs.launchpad.net/bugs/104957
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 104957] Re: users with no password can't log in with gdm

2009-07-16 Thread Sebastien Bacher
the issue is fixed upstream now

** Changed in: gdm (Ubuntu)
   Status: Triaged => Fix Committed

-- 
users with no password can't log in with gdm
https://bugs.launchpad.net/bugs/104957
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 104957] Re: users with no password can't log in with gdm

2009-06-30 Thread Milan Bouchet-Valat
BTW, the upstream bug in GDM has moved towards the solution I have
described in my previous comment. As stated in this report, the present
problem is in Debian/Ubuntu, not GDM.

** Changed in: gdm
   Importance: Unknown => Undecided

** Changed in: gdm
 Remote watch: GNOME Bug Tracker #414862 => None

** Changed in: gdm
   Status: New => Invalid

-- 
users with no password can't log in with gdm
https://bugs.launchpad.net/bugs/104957
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 104957] Re: users with no password can't log in with gdm

2009-06-30 Thread Milan Bouchet-Valat
See bug 393854 for a related approach of the problem of password-less
logins. It suggests using accounts that actually have a password, but
not to check it when logging with GDM. While this may not suit all cases
described here, that can solve many of them.

-- 
users with no password can't log in with gdm
https://bugs.launchpad.net/bugs/104957
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 104957] Re: users with no password can't log in with gdm

2009-06-30 Thread Sebastien Bacher
there is no reason to no keep the upstream bug referenced there

** Changed in: gdm
   Importance: Undecided => Unknown

** Changed in: gdm
   Status: Invalid => Unknown

** Changed in: gdm
 Remote watch: None => GNOME Bug Tracker #414862

-- 
users with no password can't log in with gdm
https://bugs.launchpad.net/bugs/104957
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 104957] Re: users with no password can't log in with gdm

2009-07-01 Thread Milan Bouchet-Valat
...except that the upstream bug linked here does not deal with the
present problem at all, and never has. It is now marked as Fix Released
since I committed patches for that, but these patches are not related to
our problem which *is only in Ubuntu packaging*. Upstream has nothing to
do with this at all.

-- 
users with no password can't log in with gdm
https://bugs.launchpad.net/bugs/104957
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 104957] Re: users with no password can't log in with gdm

2009-07-01 Thread Sebastien Bacher
could you explain what is the packaging issue there then and how it's
different from the other bug and the GNOME change you did? adding
statements without explanations of the issue is not really constructive
there

-- 
users with no password can't log in with gdm
https://bugs.launchpad.net/bugs/104957
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 104957] Re: users with no password can't log in with gdm

2009-07-01 Thread Milan Bouchet-Valat
Sorry, I thought I had been explicit enough.

The present bug deals with users with an empty password (using 'passwd
-d'), while bug 393854 is about users actually having a password, but
GDM not checking it to log in. In the present bug, GDM is handling the
problem fine, we only need our PAM config files allow for empty password
on graphical ttys: for now, they are not considered as secure ttys,
while they should (above discussion). In the other bug, we need our PAM
config file for GDM to allow members of the nopasswdlogin group to log
in without any further authentication.

So nothing related in the way we should fix those, while they target
related use cases. Hope this helps.

-- 
users with no password can't log in with gdm
https://bugs.launchpad.net/bugs/104957
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 104957] Re: users with no password can't log in with gdm

2009-07-01 Thread Sebastien Bacher
the new comment clarify some things but the issue seems rather a policy
decision rather than a packaging bug as you suggested

-- 
users with no password can't log in with gdm
https://bugs.launchpad.net/bugs/104957
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 104957] Re: users with no password can't log in with gdm

2009-05-09 Thread Mantas Kriaučiūnas
** Also affects: shadow (Ubuntu)
   Importance: Undecided
   Status: New

-- 
users with no password can't log in with gdm
https://bugs.launchpad.net/bugs/104957
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 104957] Re: users with no password can't log in with gdm

2009-05-09 Thread Mantas Kriaučiūnas
I've assigned this bug to shadow (login) packages, because according to
latest comments from Flabdablet  and steve.langa...@canonical.com the
way to solve password-less local login bug by adding lines bellow to
/etc/shadow is correct:

# Local X displays
:0
:0.0
:1
:1.0
:2
:2.0
:3
:3.0
...
:63
:63.0

-- 
users with no password can't log in with gdm
https://bugs.launchpad.net/bugs/104957
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 104957] Re: users with no password can't log in with gdm

2009-05-10 Thread Nicolas François
I will add these lines to /etc/securetty in the next Debian package.

Why did you included the displays from 0 to 63? (Is 63 the maximum, or is it 
just meant to be mostly complete?)
If 63 is not the maximum, I would prefer to reduce the number of displays to a 
more reallistic value (i.e. I do not expect so many displays on systems were 
empty passwords are allowed), but maybe also add support for systems with 
multiple heads (i.e. also support :0.1).


I submitted http://bugs.debian.org/528015 to update the documentation or 
securetty, since this usage is quite different from what is currently 
documented.

** Bug watch added: Debian Bug tracker #528015
   http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=528015

-- 
users with no password can't log in with gdm
https://bugs.launchpad.net/bugs/104957
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 104957] Re: users with no password can't log in with gdm

2009-06-02 Thread Teej
What status should pam and shadow be? Is this a bug in those packages?
If so, please set these as Triaged too, and if not mark them Invalid -
for now I shall mark these as Incomplete. Thank you guys.

** Changed in: pam (Ubuntu)
   Status: New => Incomplete

** Changed in: gdm (Baltix)
   Status: New => Incomplete

** Changed in: shadow (Ubuntu)
   Status: New => Incomplete

-- 
users with no password can't log in with gdm
https://bugs.launchpad.net/bugs/104957
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 104957] Re: users with no password can't log in with gdm

2009-06-02 Thread Steve Langasek
that's not an appropriate use of the 'incomplete' status.

** Changed in: shadow (Ubuntu)
   Status: Incomplete => New

** Changed in: pam (Ubuntu)
   Status: Incomplete => New

-- 
users with no password can't log in with gdm
https://bugs.launchpad.net/bugs/104957
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 104957] Re: users with no password can't log in with gdm

2009-06-02 Thread Teej
I realise that, but I was always told to set bugs to Incomplete status
if asking for information, but it does look messy as "new" :) Should
these be Confirmed then?

-- 
users with no password can't log in with gdm
https://bugs.launchpad.net/bugs/104957
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 104957] Re: users with no password can't log in with gdm

2009-06-02 Thread Steve Langasek
The 'incomplete' status is meant to indicate that more information is
needed from the bug submitter.  You appear to be asking for information
from the developers...

It's already been acknowledged by one of the shadow developers as a bug
in that package.  I'm still considering whether we should also treat
this as a bug in pam for not having a sensible wildcard format for
/etc/securetty.

-- 
users with no password can't log in with gdm
https://bugs.launchpad.net/bugs/104957
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 104957] Re: users with no password can't log in with gdm

2009-06-02 Thread Teej
Agreed. Is this OK to mark shadow as Confirmed? I shall leave this in
your more-than-capable hands then Steve, and sorry for the confusion.
Thank you :)

-- 
users with no password can't log in with gdm
https://bugs.launchpad.net/bugs/104957
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 104957] Re: users with no password can't log in with gdm

2009-06-02 Thread Steve Langasek
** Changed in: shadow (Ubuntu)
   Importance: Undecided => Low

** Changed in: shadow (Ubuntu)
   Status: New => Confirmed

** Changed in: shadow (Ubuntu)
   Status: Confirmed => Triaged

-- 
users with no password can't log in with gdm
https://bugs.launchpad.net/bugs/104957
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 104957] Re: users with no password can't log in with gdm

2009-08-19 Thread Vikram
I tried the method by adding a user: useradd test and then from the
switch user I went into test and was able to login without a password.
This problem doesn't exist in the later kernels. Please update your
kernel which will solve your problem and thanks for reporting this
bug...

** Changed in: pam (Ubuntu)
   Status: New => Fix Released

** Changed in: pam (Ubuntu)
 Assignee: (unassigned) => Vikram (dhillon-v10)

-- 
users with no password can't log in with gdm
https://bugs.launchpad.net/bugs/104957
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 104957] Re: users with no password can't log in with gdm

2009-08-19 Thread Steve Langasek
This bug has nothing to do with kernels.  The pam task is still open for
the reason given in
.
Do not touch the status of this task

** Changed in: pam (Ubuntu)
   Status: Fix Released => Triaged

** Changed in: pam (Ubuntu)
 Assignee: Vikram (dhillon-v10) => (unassigned)

-- 
users with no password can't log in with gdm
https://bugs.launchpad.net/bugs/104957
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 104957] Re: users with no password can't log in with gdm

2009-08-19 Thread Milan Bouchet-Valat
Please, be rigorous when performing tests. This bug is about logging in
from GDM, not form the fast-user-switch-applet. They can perfectly use
different policy files in /etc/pam.d, so they need to be treated
separately. And i don't see how this could be related to your kernel
version (securettys?).

I'm reopening this bug waiting for somebody to test this in Karmic. And
BTW, as I said, the upstream bug has nothing to do with the current
problem, so I'm removing the link.

** Changed in: gdm
   Importance: Unknown => Undecided

** Changed in: gdm
   Status: Fix Released => New

** Changed in: gdm
 Remote watch: GNOME Bug Tracker #414862 => None

-- 
users with no password can't log in with gdm
https://bugs.launchpad.net/bugs/104957
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 104957] Re: users with no password can't log in with gdm

2009-08-19 Thread Vikram
Sorrry :(

-- 
users with no password can't log in with gdm
https://bugs.launchpad.net/bugs/104957
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 104957] Re: users with no password can't log in with gdm

2009-08-19 Thread Steve Langasek
Well in that case, I'm marking the gdm Ubuntu task as invalid.  The
Debian shadow maintainer has agreed that /etc/securetty should mark
these X displays as trusted. This hasn't entirely been implemented yet
since fusa jumps straight to :20 as its next display number and
/etc/securetty only goes up to :3 currently, so this still needs to be
implemented (either by supporting wildcards in pam or by listing out all
the displays in /etc/securetty), but in either case no code can or
should be changed in gdm for this.

** Changed in: gdm (Ubuntu)
   Status: Fix Committed => Invalid

** Changed in: pam (Ubuntu)
   Importance: Undecided => Medium

-- 
users with no password can't log in with gdm
https://bugs.launchpad.net/bugs/104957
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 104957] Re: users with no password can't log in with gdm

2009-08-19 Thread Vikram
I agree with Milan Bouchet-Valat, this has nothing to do with the
upstream bug, and I did the tests over again and (my fault) using GDM
the login fails in Karamic Alpha 3 (daily build). Bug 393854 offer a
solution  So I don't see a reason not to mark this bug confirmed. Please
take acitons as necessary.

Thanks,
Vikram

-- 
users with no password can't log in with gdm
https://bugs.launchpad.net/bugs/104957
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 104957] Re: users with no password can't log in with gdm

2009-08-20 Thread Flabdablet
Nicolas François  wrote on 2009-05-10:

Why did you included the displays from 0 to 63? (Is 63 the maximum, or
is it just meant to be mostly complete?)

I had no idea about maximums - I was just following the existing pattern
for ttyNN and vc/NN. But from what Steve Langasek wrote on 2009-08-19,
the instinct seems sound :-)

-- 
users with no password can't log in with gdm
https://bugs.launchpad.net/bugs/104957
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 104957] Re: users with no password can't log in with gdm

2007-04-12 Thread Sebastien Bacher
that's know upstream: http://bugzilla.gnome.org/show_bug.cgi?id=414862

** Changed in: gdm (Ubuntu)
   Importance: Undecided => Wishlist
 Assignee: (unassigned) => Ubuntu Desktop Bugs

** Bug watch added: GNOME Bug Tracker #414862
   http://bugzilla.gnome.org/show_bug.cgi?id=414862

** Also affects: gdm (upstream) via
   http://bugzilla.gnome.org/show_bug.cgi?id=414862
   Importance: Unknown
   Status: Unknown

-- 
users with no password can't log in with gdm
https://bugs.launchpad.net/bugs/104957
You received this bug notification because you are a member of Ubuntu
Bugs, which is the bug contact for Ubuntu.

-- 
ubuntu-bugs mailing list
[EMAIL PROTECTED]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 104957] Re: users with no password can't log in with gdm

2007-04-13 Thread Bug Watch Updater
** Changed in: gdm (upstream)
   Status: Unknown => Unconfirmed

-- 
users with no password can't log in with gdm
https://bugs.launchpad.net/bugs/104957
You received this bug notification because you are a member of Ubuntu
Bugs, which is the bug contact for Ubuntu.

-- 
ubuntu-bugs mailing list
[EMAIL PROTECTED]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 104957] Re: users with no password can't log in with gdm

2007-04-09 Thread Tomi

** Attachment added: "Dependencies.txt"
   http://librarian.launchpad.net/7228877/Dependencies.txt

** Attachment added: "ProcMaps.txt"
   http://librarian.launchpad.net/7228878/ProcMaps.txt

** Attachment added: "ProcStatus.txt"
   http://librarian.launchpad.net/7228879/ProcStatus.txt

-- 
users with no password can't log in with gdm
https://bugs.launchpad.net/bugs/104957
You received this bug notification because you are a member of Ubuntu
Bugs, which is the bug contact for Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 104957] Re: users with no password can't log in with gdm

2007-04-09 Thread Kristian Hermansen
Confirmed in gdm 2.18.0-0ubuntu4.

/var/log/auth.log provides insight.  I tested this with a user account
named peter.  Results below on attempted GDM login...

Apr  9 23:59:04 khermans-laptop gdm[9757]: (pam_securetty) access denied: tty 
':20' is not secure !
Apr  9 23:59:04 khermans-laptop gdm[9757]: (pam_securetty) access denied: tty 
':20' is not secure !
Apr  9 23:59:04 khermans-laptop gdm[9757]: (pam_unix) authentication failure; 
logname= uid=0 euid=0 tty=:20 ruser= rhost=  user=peter

** Changed in: gdm (Ubuntu)
   Status: Unconfirmed => Confirmed

-- 
users with no password can't log in with gdm
https://bugs.launchpad.net/bugs/104957
You received this bug notification because you are a member of Ubuntu
Bugs, which is the bug contact for Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 104957] Re: users with no password can't log in with gdm

2008-07-29 Thread Steve Langasek
The other way to fix this, rather than disabling nullok_secure (which
isn't a good idea as a default), would be to add your X console to
/etc/securetty.  Can someone test and confirm that this works?

I'm not sure whether doing that by default would be a good idea, either,
from a security standpoint.  I think we would want to be able to
distinguish local X sessions from XDMCP sessions for such a change, and
I'm not sure how that's possible.  Sebastien, perhaps you have some
thoughts on this?

-- 
users with no password can't log in with gdm
https://bugs.launchpad.net/bugs/104957
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 104957] Re: users with no password can't log in with gdm

2008-07-30 Thread Sebastien Bacher
the xdmcp browser and standard login greeter are different interface so
it would probably be possible to special cases non password local logins
if somebody really wants to work on this nonsecure option

-- 
users with no password can't log in with gdm
https://bugs.launchpad.net/bugs/104957
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 104957] Re: users with no password can't log in with gdm

2008-07-31 Thread Sebastien Bacher
> Do xdmcp and the standard greeter declare separate PAM service names?

not that I know no but I'm not a pam expert and you might want to look
at the code to make sure that's not the case

-- 
users with no password can't log in with gdm
https://bugs.launchpad.net/bugs/104957
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 104957] Re: users with no password can't log in with gdm

2008-01-29 Thread Zealot
by the way, you'd better also edit /etc/pam.d/xscreensaver, or you could
not unlock the window if screensaver started.

-- 
users with no password can't log in with gdm
https://bugs.launchpad.net/bugs/104957
You received this bug notification because you are a member of Ubuntu
Bugs, which is the bug contact for Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 104957] Re: users with no password can't log in with gdm

2008-01-29 Thread Zealot
It is not gdm issue, you can easily fix it by edit /etc/pam.d/gdm

replace this line:
@include common-auth
with
authrequiredpam_unix.so nullok

Because common-auth will check if the login user has a tty when empty password 
is provide.
But you can not get a tty from gdm login window.

-- 
users with no password can't log in with gdm
https://bugs.launchpad.net/bugs/104957
You received this bug notification because you are a member of Ubuntu
Bugs, which is the bug contact for Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 104957] Re: users with no password can't log in with gdm

2008-01-29 Thread Philipp Kohlbecher
I haven't tested Zealot's fix yet, but it looks promising.

The man page for pam_unix has the following to say about the nullok_secure 
option that is used in /etc/pam.d/common-auth:
The default action of this module is to not permit the user access to a service 
if their official password is blank. The nullok_secure argument overrides this 
default and allows any user with a blank password to access the service as long 
as the value of PAM_TTY is set to one of the values found in /etc/securetty.

Thus, the behavior of the module is as documented; it's a feature, not a
bug! =)

So, the only possible fix would be changing nullok_secure to nullok as
per Zealot's fix above (or globally in /etc/pam.d/common-auth). I do not
know enough about the security implications of such a change to tell
whether it would be a good idea in a default install, so I am leaving
this open for now.

-- 
users with no password can't log in with gdm
https://bugs.launchpad.net/bugs/104957
You received this bug notification because you are a member of Ubuntu
Bugs, which is the bug contact for Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 104957] Re: users with no password can't log in with gdm

2007-10-10 Thread Mantas Kriaučiūnas
** Also affects: gdm (Baltix)
   Importance: Undecided
   Status: New

-- 
users with no password can't log in with gdm
https://bugs.launchpad.net/bugs/104957
You received this bug notification because you are a member of Ubuntu
Bugs, which is the bug contact for Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 104957] Re: users with no password can't log in with gdm

2007-10-10 Thread Philipp Kohlbecher
Isn't this a PAM bug?

I get the same result as Kristian Erik Hermansen above, namely that
login is rejected by pam_securetty. However, I do not quite see why
pam_securetty should be run.

> grep -r pam_securetty /etc/pam.d
/etc/pam.d/login:auth   requisite  pam_securetty.so

So, if I am not mistaken, pam_securetty should only be run for the "login" 
service, not for gdm.
Also, /usr/share/doc/libpam-doc/html/pam-6.html#ss6.23 states for the 
pam_securetty module: "Provides standard Unix securetty checking, which causes 
authentication for root to fail unless PAM_TTY is set to a string listed in the 
/etc/securetty file. For all other users, it succeeds."

So pam_securetty should not be run at all, and it should certainly not
fail.

** Also affects: pam (Ubuntu)
   Importance: Undecided
   Status: New

-- 
users with no password can't log in with gdm
https://bugs.launchpad.net/bugs/104957
You received this bug notification because you are a member of Ubuntu
Bugs, which is the bug contact for Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 104957] Re: users with no password can't log in with gdm

2007-10-10 Thread Philipp Kohlbecher
This is untested, but the problem might be this:

pam-0.79/Linux-PAM/modules/pam_unix/support.c: _unix_blankpasswd
contains the following:

if ((retval == 1) && on(UNIX_NULLOK_SECURE, ctrl)) {
int retval2;
const char *uttyname;
retval2 = pam_get_item(pamh, PAM_TTY, (const void **)&uttyname);
if (retval2 != PAM_SUCCESS || uttyname == NULL)
return 0;

if (_pammodutil_tty_secure(uttyname) != PAM_SUCCESS)
return 0;
}

It appears that the tty is always checked if the password is blank.
Can anybody confirm that this is, in fact, the problem? Why is this check 
performed?

-- 
users with no password can't log in with gdm
https://bugs.launchpad.net/bugs/104957
You received this bug notification because you are a member of Ubuntu
Bugs, which is the bug contact for Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 104957] Re: users with no password can't log in with gdm

2007-08-08 Thread Sebastien Bacher
** Changed in: gdm (Ubuntu)
   Status: Confirmed => Triaged

-- 
users with no password can't log in with gdm
https://bugs.launchpad.net/bugs/104957
You received this bug notification because you are a member of Ubuntu
Bugs, which is the bug contact for Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 104957] Re: users with no password can't log in with gdm

2007-04-09 Thread Tomi

** Attachment added: "Dependencies.txt"
   http://librarian.launchpad.net/7228877/Dependencies.txt

** Attachment added: "ProcMaps.txt"
   http://librarian.launchpad.net/7228878/ProcMaps.txt

** Attachment added: "ProcStatus.txt"
   http://librarian.launchpad.net/7228879/ProcStatus.txt

-- 
users with no password can't log in with gdm
https://bugs.launchpad.net/bugs/104957
You received this bug notification because you are a member of Ubuntu
Bugs, which is the bug contact for Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


  1   2   3   4   5   6   7   8   9   10   >