https://bugzilla.novell.com/show_bug.cgi?id=833253 https://bugzilla.novell.com/show_bug.cgi?id=833253#c FeiXiang Zhang changed: What |Removed |Added ---------------------------------------------------------------------------- AssignedTo|bnc-team-screening@forge.pr |kde-maintainers@suse.de |ovo.novell.com | -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=833253 https://bugzilla.novell.com/show_bug.cgi?id=833253#c2 Hrvoje Senjan changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |NEEDINFO CC| |hrvoje.senjan@gmail.com InfoProvider| |mrmazda@earthlink.net --- Comment #2 from Hrvoje Senjan 2013-10-15 19:24:14 UTC --- Felix, can you try with latest upadates in 13.1? Make sure you have: Fri Oct 11 20:46:02 UTC 2013 - hrvoje.senjan@gmail.com - Adjust kdm-sysconfig-values.diff so it doesn't dictates AllowNullPasswd option (bnc#833634) - Make main package Recommends kde-gtk-config (bnc#845592) in rpm -q --changelog kdm | head. I am not sure is that already published for 13.1 -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=833253 https://bugzilla.novell.com/show_bug.cgi?id=833253#c4 --- Comment #4 from Felix Miata 2013-10-16 04:48:03 UTC --- (In reply to comment #2)

Make sure you have: Fri Oct 11 20:46:02 UTC 2013 - hrvoje.senjan@gmail.com

- Adjust kdm-sysconfig-values.diff so it doesn't dictates AllowNullPasswd option (bnc#833634) - Make main package Recommends kde-gtk-config (bnc#845592)

in rpm -q --changelog kdm | head. I am not sure is that already published for 13.1

Apparently not. On a just dup'd system latest entry is 07 Oct. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=833253 https://bugzilla.novell.com/show_bug.cgi?id=833253#c6 --- Comment #6 from Felix Miata 2013-11-10 08:16:35 UTC --- Having zypper -v dup'd hosts gx110 & gx27b from RC2 with kdebase3-kdm, and host t2240 with kdm-4.11.2-4.1, to whatever is in the 13.1 oss, non-oss & update repos now, still what happens attempting to set null password is: # passwd <loginname> New: password: BAD PASSWORD: it is WAY too short BAD PASSWORD: is a palindrome Retype new password: No password supplied passwd: Authentication token manipulation error passwd: password unchanged YaST2 still refuses to accept blank passwords: "No password entered. Try again." kdmrc contains uncommented: AllowNullPasswd=true NoPassEnable=true NoPassAllUsers=true NoPassUsers=* In spite of inability to login on a vtty, both KDMs do accept login without passwd entry, confirming this is not a KDE3 or KDE4 issue. kdebase3-kdm changelog head has entries by anixx@ 09 Aug, 10 Sep, 07 Nov, none of which mention anything in comment 2. kdm4's changelog includes the comment 2 reference re AllowNullPasswd. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=833253 https://bugzilla.novell.com/show_bug.cgi?id=833253#c8 --- Comment #8 from Felix Miata 2013-11-10 17:38:36 UTC --- Ditto comment 6 for 13.1/KDE 4.11.2 host vizio. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=833253 https://bugzilla.novell.com/show_bug.cgi?id=833253#c10 --- Comment #10 from Felix Miata 2013-11-13 18:21:25 UTC --- Ditto comment 6 for 13.1/KDE 4.11.2 host gx270. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=833253 https://bugzilla.novell.com/show_bug.cgi?id=833253#c12 Raymond Wooninck changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |tittiatcoke@gmail.com InfoProvider|hrvoje.senjan@gmail.com |mrmazda@earthlink.net --- Comment #12 from Raymond Wooninck 2014-02-21 09:45:57 UTC --- I don't know why this bug was ever assigned to the KDE maintainers, as that it is clear that it was indicated that the issue also occurs when logging in on a vtty. Felix, did you check if pam has been setup correctly to allow this ? I can imagine that the default setup would be to prevent passwordless logins. Accounts without password (i.e. where the password has been cleared with "passwd -d") may authenticate without being asked for a password if the nullok option is present in /etc/pam.d/common-auth. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=833253 https://bugzilla.novell.com/show_bug.cgi?id=833253#c14 Raymond Wooninck changed: What |Removed |Added ---------------------------------------------------------------------------- AssignedTo|kde-maintainers@suse.de |bnc-team-screening@forge.pr | |ovo.novell.com --- Comment #14 from Raymond Wooninck 2014-02-21 11:02:11 UTC --- Reassigning this to the default bugowner. This is NOT a KDE issue, but it seems more in the setup of PAM. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=833253 https://bugzilla.novell.com/show_bug.cgi?id=833253#c zhang jiajun changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |jzhang@suse.com AssignedTo|bnc-team-screening@forge.pr |coolo@suse.com |ovo.novell.com | -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=833253 https://bugzilla.novell.com/show_bug.cgi?id=833253#c17 --- Comment #17 from Felix Miata 2014-02-27 09:55:56 UTC --- (In reply to comment #16)

I hope you can understand that we are not going to add these settings to the standard/default kdmrc.

I don't know why anyone would think I expect changes to default kdmrc settings on account of this bug. Neither do I expect users to be able to login when the passwd command rejects null passwords, and passwd -d fails to dispense with need for any password. What I do expect is to be able to have ordinary users able to login in "runlevel 3" without need to type any password, like I could in 12.3, when the current SuSE Linux kernel was 2.4.18, when the current Corel Linux kernel was 2.2.14, and when the current RedHat kernel was 2.0.32, without need to graft content from an earlier or alien installation into 13.1's or Factory's /etc/passwd and /etc/shadow. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=833253 https://bugzilla.novell.com/show_bug.cgi?id=833253#c19 Felix Miata changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |REOPENED Resolution|FIXED | Status Whiteboard| |regression --- Comment #19 from Felix Miata 2014-02-27 12:08:28 UTC --- (In reply to comment #18)

There is a very fast solution to your issue.

You edit the file /etc/pam.d/common-auth

I think not. That is a symlink to common-auth-pc, which contains the following (in 13.2) first lines: #%PAM-1.0 # # This file is autogenerated by pam-config. All changes # will be overwritten. That file exists in neither Mageia 4 nor Fedora 20 nor Rawhide. F20 does have something similar, though larger in uncommented line count, passwd-auth-ac: #%PAM-1.0 # This file is auto-generated. # User changes will be destroyed the next time authconfig is run. auth required pam_env.so auth sufficient pam_unix.so nullok try_first_pass auth requisite pam_succeed_if.so uid >= 1000 quiet_success auth required pam_deny.so account required pam_unix.so account sufficient pam_localuser.so account sufficient pam_succeed_if.so uid < 1000 quiet account required pam_permit.so password requisite pam_pwquality.so try_first_pass retry=3 authtok_type= password sufficient pam_unix.so sha512 shadow nullok try_first_pass use_authtok password required pam_deny.so session optional pam_keyinit.so revoke session required pam_limits.so -session optional pam_systemd.so session [success=1 default=ignore] pam_succeed_if.so service in crond quiet use_uid session required pam_unix.so

and there should be two lines in there:

auth required pam_env.so auth required pam_unix2.so

Behind each of the above lines you put the word nullok, so that it looks like this:

auth required pam_env.so nullok auth required pam_unix2.so nullok

Save the file and your issue is resolved. Users no longer require a password if there is no password defined and the behavior is now as you want it.

If you had read my comment (comment#12) and had looked at the pam settings and manuals instead of bringing up all kind of historical information about how older versions were able to do this, etc, then you could have easily resolved the issue yourself !!

You assume too much. I get little out of man pages due to their extreme dearth of examples. You referred to pam, but I know nothing about pam, as I never needed to know until now. And I still don't really. man pam is barely a screenful, with no reference to common-auth or common-auth-pc. I don't expect your suggested edits to help anything given the warning comment in that config file.

But with the information provided in this comment, I am closing this bug report as resolved as that it is possible to have the required behavior if you set up the system in that way. That it is not the default setup as that it was in the past is a different story, but I guess editing two files as a system administrator should be easy enough.

Easy enough maybe only with readily discoverable and understandible docs, and certainly not as easy as in previous releases and competing distros. This particular added complication makes dispensing with normal users and doing all as root look inviting too. This impediment was not part of previous openSUSEes, and remains not in Fedora 20, Fedora 21, and Mageia 4, to edit any config files in order to enable a user to require no password to login. Now as before in both Fedora and Mageia, passwd -d username is all that's required to enable passwordless vtty login. The passwd -d method never worked in openSUSE (why?), but passwd would accept null passwords for non-root users (unlike all other distros I can recall ATM). So, I'm reopening, on account of no indication how to cause the desired result without suggested edits being overwritten at autogeneration time, whenever that is. Where does one put nullok that automagic will put it in instead of stripping it out? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=833253 https://bugzilla.novell.com/show_bug.cgi?id=833253#c21 Stephan Kulow changed: What |Removed |Added ---------------------------------------------------------------------------- Status|REOPENED |RESOLVED Resolution| |WONTFIX --- Comment #21 from Stephan Kulow 2014-09-17 16:11:52 CEST --- I don't see a bug - pam just works the way it works - awefully. If you think more documentation might help, feel free to provide it: openSUSE documentation is in activedoc.opensuse.org -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=833253 https://bugzilla.novell.com/show_bug.cgi?id=833253#c Felix Miata changed: What |Removed |Added ---------------------------------------------------------------------------- Status|REOPENED |NEEDINFO InfoProvider| |coolo@suse.com -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.