https://bugzilla.novell.com/show_bug.cgi?id=302282#c1 --- Comment #1 from Tim Lee 2007-08-21 14:10:27 MST --- Created an attachment (id=158831) --> (https://bugzilla.novell.com/attachment.cgi?id=158831) screen shot of dialog note logging this as critical since this would I think be considered a security defect. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=302282#c4 --- Comment #4 from Ray Strode 2007-08-27 09:39:52 MST --- So there is definitely a bug in GDM: case PAM_PROMPT_ECHO_OFF: .. question_msg = g_strdup_printf ("question_msg=%s$$echo=%d", text, TRUE); Note echo=1 is getting send in the command string to the daemon for the ECHO_OFF case of autologin. autologin shouldn't ever ask for a password, though, so there is some bug in a pam module or the pam configuration. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=302282#c6 --- Comment #6 from Ladislav Michnovič 2007-08-27 10:06:19 MST --- (In reply to comment #4 from Ray Strode)

So there is definitely a bug in GDM:

case PAM_PROMPT_ECHO_OFF: ... question_msg = g_strdup_printf ("question_msg=%s$$echo=%d", text, TRUE);

Note echo=1 is getting send in the command string to the daemon for the ECHO_OFF case of autologin.

autologin shouldn't ever ask for a password, though, so there is some bug in a pam module or the pam configuration.

It should ask for password. There is a parameter DISPLAYMANAGER_PASSWORD_LESS_LOGIN in /etc/sysconfig/displaymanager set to NO which should be honored. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=302282#c8 --- Comment #8 from Ray Strode 2007-08-27 10:42:59 MST --- or do you guys patch gdm to use a different pam service file than gdm-autologin if DISPLAYMANAGER_PASSWORD_LESS_LOGIN=NO ? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=302282#c10 Stephan Binner changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |chirag@chineelcomputer.com --- Comment #10 from Stephan Binner 2007-09-02 02:56:58 MST --- *** Bug 307029 has been marked as a duplicate of this bug. *** https://bugzilla.novell.com/show_bug.cgi?id=307029 -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=302282#c12 --- Comment #12 from Stephan Binner 2007-09-02 02:57:24 MST --- *** Bug 304607 has been marked as a duplicate of this bug. *** https://bugzilla.novell.com/show_bug.cgi?id=304607 -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=302282#c13 --- Comment #13 from JP Rosevear 2007-09-02 10:12:18 MST --- Ok, the problem appears to be pam_permit on the installed system is not in /etc/pam.d/gdm-autologin however: jpr@macintyre:/work/SAVE/oldpackages/stable/gdm/gdm-20070831> more gdm-autologin.pamd #%PAM-1.0 auth required pam_permit.so account include common-account password include common-password session required pam_loginuid.so session include common-session session required pam_resmgr.so and jpr@macintyre:/work/SAVE/oldpackages/stable/gdm/gdm-20070831> more *.changes ------------------------------------------------------------------- Fri Aug 17 00:20:34 CEST 2007 - hpj@suse.de - Fixed missing configuration variable definition in gdm-2.8.0.7-domain-entry.patch. ---------------------------------------------- show that the version on there should be fine (and in fact has been fine for weeks). As well rpm -q --verify on an installed system shows that gdm-autologin has been modified. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=302282#c15 JP Rosevear changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |hpj@novell.com --- Comment #15 from JP Rosevear 2007-09-02 10:32:18 MST --- Btw, for the plain text part of this, its upstream in an unreleased version, but we can get this patch: 2007-08-27 Brian Cameron * daemon/verify-pam.c: When using gdm_verify_standalone_pam_conv we need to send echo to FALSE when PAM_PROMPT_ECHO_OFF is handled. Fixes bug #470728. if we need it for beta 3, the patch is at: http://svn.gnome.org/viewcvs/gdm2/trunk/daemon/verify-pam.c?r1=5138&r2=5194&view=patch HPJ, please check in for Monday if need be. gdm is a leaf so it should be ok. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=302282#c17 Christoph Thiel changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution| |FIXED --- Comment #17 from Christoph Thiel 2007-09-04 08:45:20 MST --- fixed. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=302282#c19 JP Rosevear changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |mackendw@sympatico.ca --- Comment #19 from JP Rosevear 2007-09-05 09:01:10 MST --- *** Bug 307750 has been marked as a duplicate of this bug. *** https://bugzilla.novell.com/show_bug.cgi?id=307750 -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.