https://bugzilla.novell.com/show_bug.cgi?id=442552
Summary: Predefined Security Configurations > Security Settings doesn't get saved Product: openSUSE 11.1 Version: Factory Platform: Other OS/Version: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security AssignedTo: security-team@suse.de ReportedBy: jeffery@ivt.com.au QAContact: qa@suse.de Found By: Community User
When using
Yast2 > Security & Users > Local Security > Predefined Security Configurations
and selecting any of the predefined settings and hitting "ok", it closes the window. But when you return to the same settings window, it defaults to "custom" settings.
Settings are not being saved.
https://bugzilla.novell.com/show_bug.cgi?id=442552
User thomas@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=442552#c1
--- Comment #1 from Thomas Biege thomas@novell.com 2008-11-07 02:15:41 MST --- Do you run yast2 as root?
https://bugzilla.novell.com/show_bug.cgi?id=442552
Thomas Biege thomas@novell.com changed:
What |Removed |Added ---------------------------------------------------------------------------- AssignedTo|security-team@suse.de |yast2-maintainers@suse.de
https://bugzilla.novell.com/show_bug.cgi?id=442552
User jeffery@ivt.com.au added comment https://bugzilla.novell.com/show_bug.cgi?id=442552#c2
--- Comment #2 from Jeffery Fernandez jeffery@ivt.com.au 2008-11-07 02:40:16 MST --- ran it as normal user, prompted me for root password.
https://bugzilla.novell.com/show_bug.cgi?id=442552
Ján Kupec jkupec@novell.com changed:
What |Removed |Added ---------------------------------------------------------------------------- CC| |jkupec@novell.com AssignedTo|yast2-maintainers@suse.de |jsuchome@novell.com
https://bugzilla.novell.com/show_bug.cgi?id=442552
User jkupec@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=442552#c3
Ján Kupec jkupec@novell.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |NEEDINFO Info Provider| |jeffery@ivt.com.au
--- Comment #3 from Ján Kupec jkupec@novell.com 2008-11-07 03:25:05 MST --- Please attach also yast logs: http://en.opensuse.org/Bugs/YaST
https://bugzilla.novell.com/show_bug.cgi?id=442552
User jeffery@ivt.com.au added comment https://bugzilla.novell.com/show_bug.cgi?id=442552#c4
Jeffery Fernandez jeffery@ivt.com.au changed:
What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |NEW Info Provider|jeffery@ivt.com.au |
--- Comment #4 from Jeffery Fernandez jeffery@ivt.com.au 2008-11-07 03:34:09 MST --- Created an attachment (id=250598) --> (https://bugzilla.novell.com/attachment.cgi?id=250598) Yast2 Log
Attached Yast2 Log folder
https://bugzilla.novell.com/show_bug.cgi?id=442552
User jsuchome@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=442552#c5
Jiří Suchomel jsuchome@novell.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |NEEDINFO Info Provider| |mc@novell.com
--- Comment #5 from Jiří Suchomel jsuchome@novell.com 2008-11-07 06:49:33 MST --- Huh, there are several errors.
1. pam-config:
gorgon:~ # pam-config -a --pwcheck-remember=1 gorgon:~ # pam-config -q --pwcheck password: nullok cracklib remember=1 gorgon:~ # pam-config -d --pwcheck-remember= gorgon:~ # pam-config -q --pwcheck password: nullok cracklib remember=
Michael, I assume that afgter the last call, "remember=" should not be present.
https://bugzilla.novell.com/show_bug.cgi?id=442552
User jsuchome@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=442552#c6
--- Comment #6 from Jiří Suchomel jsuchome@novell.com 2008-11-07 07:06:06 MST --- (In reply to comment #5 from Jiří Suchomel)
Huh, there are several errors.
- pam-config:
Michael, I assume that afgter the last call, "remember=" should not be present.
Same issue for minlen= (I thought it was it before...)
https://bugzilla.novell.com/show_bug.cgi?id=442552
User jsuchome@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=442552#c7
--- Comment #7 from Jiří Suchomel jsuchome@novell.com 2008-11-07 07:09:07 MST --- pam-config -a --pwcheck-minlen=6 even cannot be set
https://bugzilla.novell.com/show_bug.cgi?id=442552
User mc@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=442552#c8
Michael Calmer mc@novell.com changed:
What |Removed |Added ---------------------------------------------------------------------------- CC| |mc@novell.com Status|NEEDINFO |NEW Info Provider|mc@novell.com |
--- Comment #8 from Michael Calmer mc@novell.com 2008-11-07 07:57:12 MST --- (In reply to comment #5 from Jiří Suchomel)
Huh, there are several errors.
- pam-config:
gorgon:~ # pam-config -a --pwcheck-remember=1 gorgon:~ # pam-config -q --pwcheck password: nullok cracklib remember=1 gorgon:~ # pam-config -d --pwcheck-remember=
^ Please do not put the "=" sign at the end if you want to remove an option.
It looks like it work for minlen (with the "=") I will have a look why. But a quick fix would be to remove the "=" if you call "pam-config -d".
pam-config -a --pwcheck-minlen=6
works for me.
linux:~ # pam-config -q --pwcheck password: nullok cracklib linux:~ # pam-config -a --pwcheck-minlen=6 linux:~ # pam-config -q --pwcheck password: nullok cracklib minlen=6 linux:~ # pam-config -d --pwcheck-minlen linux:~ # pam-config -q --pwcheck password: nullok cracklib
https://bugzilla.novell.com/show_bug.cgi?id=442552
User jsuchome@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=442552#c9
Jiří Suchomel jsuchome@novell.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |ASSIGNED
--- Comment #9 from Jiří Suchomel jsuchome@novell.com 2008-11-07 08:01:31 MST --- (In reply to comment #8 from Michael Calmer)
(In reply to comment #5 from Jiří Suchomel)
Huh, there are several errors.
- pam-config:
gorgon:~ # pam-config -a --pwcheck-remember=1 gorgon:~ # pam-config -q --pwcheck password: nullok cracklib remember=1 gorgon:~ # pam-config -d --pwcheck-remember=
^
Please do not put the "=" sign at the end if you want to remove an option.
Looks like it worked some time or at least I was told about the first versions of pam-config that it should be done this way.
https://bugzilla.novell.com/show_bug.cgi?id=442552
User jsuchome@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=442552#c10
Jiří Suchomel jsuchome@novell.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Status|ASSIGNED |RESOLVED Resolution| |FIXED
--- Comment #10 from Jiří Suchomel jsuchome@novell.com 2008-11-07 08:16:33 MST --- All should be fixed in yast2-security-2.17.9, that --pwcheck-minlen=6 needs some more testing
https://bugzilla.novell.com/show_bug.cgi?id=442552
User mc@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=442552#c11
--- Comment #11 from Michael Calmer mc@novell.com 2008-11-07 08:35:54 MST --- (In reply to comment #9 from Jiří Suchomel)
(In reply to comment #8 from Michael Calmer)
(In reply to comment #5 from Jiří Suchomel)
[...]
Please do not put the "=" sign at the end if you want to remove an option.
Looks like it worked some time or at least I was told about the first versions of pam-config that it should be done this way.
Yes sorry. I was not aware of this. Thorsten and I found the bug now and we will fix it too. So "-d --pwcheck-remember=" will work again with beta5.