*** This bug is a security vulnerability ***

Public security bug reported:

Sometimes (often) LDAP users fails to log using lightdm.
When this happens, lightdm shows "Invalid password, please try again".

But this is not a password error, here is an extract of 
/var/log/lightdm/lighdm.log:
[+17.00s] DEBUG: Session 1458 authentication complete with return value 0: 
Success
[+17.00s] DEBUG: Authenticate result for user 'X': Success
[+17.00s] DEBUG: User 'X' authorized, but no account of that name exists

Re-trying the login gives the same error.

I've got a workaround : restarting lighdm. This works 100% of the time.
Another workaround is to delay the lightdm startup, by modifying the 
/etc/init/lightdm.conf script

ProblemType: Bug
DistroRelease: Ubuntu 12.04
Package: lightdm 1.2.3-0ubuntu2.3
ProcVersionSignature: Ubuntu 3.5.0-39.60~precise1-generic 3.5.7.17
Uname: Linux 3.5.0-39-generic x86_64
ApportVersion: 2.0.1-0ubuntu17.4
Architecture: amd64
Date: Wed Oct  9 11:24:12 2013
InstallationMedia: Ubuntu 12.04.2 LTS "Precise Pangolin" - Release amd64 
(20130213)
MarkForUpload: True
SourcePackage: lightdm
UpgradeStatus: No upgrade log present (probably fresh install)
mtime.conffile..etc.init.lightdm.conf: 2013-10-09T11:18:45

** Affects: lightdm (Ubuntu)
     Importance: Undecided
         Status: New


** Tags: amd64 apport-bug precise running-unity

** Patch added: "/etc/init/lightdm.conf workaround"
   
https://bugs.launchpad.net/bugs/1237306/+attachment/3868679/+files/lightdm.conf.diff

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1237306

Title:
  lightdm + LDAP login intermitent fail

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/lightdm/+bug/1237306/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to