https://bugzilla.novell.com/show_bug.cgi?id=731867 https://bugzilla.novell.com/show_bug.cgi?id=731867#c1 Sylvain Lavoie changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |Sylvain.Lavoie@rrs4.ca --- Comment #1 from Sylvain Lavoie 2011-11-22 20:41:00 UTC --- I also have this problem. Starting X manually provides a work around. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=731867 https://bugzilla.novell.com/show_bug.cgi?id=731867#c3 --- Comment #3 from Arun Persaud 2011-11-22 23:03:48 UTC --- I tried rebooting again with gnome.fallback=1 and without (just to make sure that the problem is still there), both still show the same error. Here is the "id gdm" output uid=107(gdm) gid=109(gdm) groups=109(gdm),33(video) -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=731867 https://bugzilla.novell.com/show_bug.cgi?id=731867#c5 --- Comment #5 from Arun Persaud 2011-11-22 23:25:22 UTC --- Created an attachment (id=463530) --> (http://bugzilla.novell.com/attachment.cgi?id=463530) logfile from /var/log/gdm -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=731867 https://bugzilla.novell.com/show_bug.cgi?id=731867#c7 --- Comment #7 from Arun Persaud 2011-12-17 00:41:27 UTC --- I still have this issue on two computers. Switched now to XDM and that works. Is there anything else I can do to help debug this? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=731867 https://bugzilla.novell.com/show_bug.cgi?id=731867#c9 Thorsten Brehm changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |brehmt@gmail.com --- Comment #9 from Thorsten Brehm 2011-12-31 09:24:22 UTC --- Exactly the same issue as described by Arun here. To me looks like a major show stopper for anyone trying to "zypper dup" from 11.4 to 12.1. Leaves the system in a crippled state, where many people will be really helpless (maybe raise bug priority?). Thanks for the "xdm" hint. Quick note for anyone else getting stuck with a black screen & wrist watch mouse cursor after the update: Press CTRL-ALT-F1, login as root on the terminal, edit /etc/sysconfig/displaymanager, set 'DISPLAYMANAGER="xdm"' (instead of gdm), then reboot. xdm isn't as pretty as gdm, but at least it restores the system and you can again login/work normally. I have also made a gdm test with "[debug] Enable = true" in the gdm config file. /var/log/message log with gdm debug output is attached. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=731867 https://bugzilla.novell.com/show_bug.cgi?id=731867#c11 Walter Haidinger changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |walter.haidinger@gmx.at --- Comment #11 from Walter Haidinger 2012-01-10 11:52:45 UTC --- Same here after a 'zypper dup' to get from 11.4 to 12.1 (no tumbleweed): Black screen with busy clock. Nothing useful in /var/log/gdm (only X11 logs). Workaround for me is using lxdm instead of gdm, i.e. install lxdm package and set in /etc/sysconfig/displaymanager: DISPLAYMANAGER="lxdm" Hint: See /etc/lxdm where you can e.g. edit lxdm.conf -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=731867 https://bugzilla.novell.com/show_bug.cgi?id=731867#c13 --- Comment #13 from Thorsten Brehm 2012-01-17 23:07:37 UTC --- And still the same here. I'm not going to reinstall my system from scratch, and can live with xdm. But if I can help with providing any additional debug info on resolving the gdm issue, let me know. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=731867 https://bugzilla.novell.com/show_bug.cgi?id=731867#c15 Thorsten Brehm changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |NEW InfoProvider|arun@gmx.de | --- Comment #15 from Thorsten Brehm 2012-01-18 20:20:25 UTC --- Created an attachment (id=471750) --> (http://bugzilla.novell.com/attachment.cgi?id=471750) gdm log files and pam.d config files I never used auto-login. /var/log/gdm and /etc/pam.d contents are attached. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=731867 https://bugzilla.novell.com/show_bug.cgi?id=731867#c17 --- Comment #17 from Vincent Untz 2012-01-19 13:04:32 UTC --- Also, just to be completely sure: are all installed packages from 12.1 after the upgrade? Not sure how to easily test this. I guess "zypper search --details | grep ^i" could be a good start. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=731867 https://bugzilla.novell.com/show_bug.cgi?id=731867#c19 --- Comment #19 from Arun Persaud 2012-01-19 16:39:36 UTC --- Created an attachment (id=471915) --> (http://bugzilla.novell.com/attachment.cgi?id=471915) content of /etc/pam.d -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=731867 https://bugzilla.novell.com/show_bug.cgi?id=731867#c21 Vincent Untz changed: What |Removed |Added ---------------------------------------------------------------------------- InfoProvider|brehmt@gmail.com |gregkh@suse.com --- Comment #21 from Vincent Untz 2012-01-19 17:24:51 UTC --- Ok, same logs and pam config is also right. So I guess gdm doesn't even have time to write logs in /var/log/gdm. Back to square one: "Berechtigung verweigert" for the gdm welcome session (which runs as the gdm user). Greg: did you hear about something like this? Was there something special about the gdm or pam in 11.4/Tumbleweed? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=731867 https://bugzilla.novell.com/show_bug.cgi?id=731867#c23 --- Comment #23 from Walter Haidinger 2012-01-20 08:33:33 UTC --- Created an attachment (id=472015) --> (http://bugzilla.novell.com/attachment.cgi?id=472015) gdm debug logs and strace output Added logfile with debugging enabled (comment #10). Also added an strace output of gdm. It hangs at line #27834. Lines afterwards are mouse movement (busy clock). Hope that helps. Notes: * I'm also seeing the failed call of bin/plymouth and the permission denied errors regarding pam * no autologin * pam config is unchanged (checked with rpm -V) * I'm using ldap for authentication but this doesn't be the issue, all users are found by gdm (fooNNN) and id <ldap-user> also works, as does lxdm with ldap-users. * Checked package list with: rpm -q -a --last Almost all packages are from opensuse 12.1, only some old gpg-pubkey* rpms and obsolete packman packages (e.g. openswan, libx264), nothing relevant, AFAIT. * rcxdm start/stop still works from another virtual console. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=731867 https://bugzilla.novell.com/show_bug.cgi?id=731867#c25 --- Comment #25 from Walter Haidinger 2012-01-20 09:22:40 UTC --- pam complains that the gdm account is locked (from syslog): gdm-welcome: DEBUG(+): GdmSessionWorker: initializing PAM gdm-welcome: pam_unix2(gdm-welcome:account): pam_sm_acct_mgmt() called gdm-welcome: pam_unix2(gdm-welcome:account): username=[gdm] gdm-welcome: pam_unix2(gdm-welcome:account): expire() returned with 0 gdm-welcome: pam_unix2(gdm-welcome:account): Account is locked for gdm gdm-welcome: DEBUG(+): GdmSessionWorker: uninitializing PAM Unlocking the gdm account, i.e. setting a password, makes gdm show the "sign in" screen. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=731867 https://bugzilla.novell.com/show_bug.cgi?id=731867#c27 Vincent Untz changed: What |Removed |Added ---------------------------------------------------------------------------- Summary|gdm hangs after Tumbleweed |gdm hangs after Tumbleweed |base update from 11.4 to |base update from 11.4 to |12.1 |12.1 (solution in comment | |#26) --- Comment #27 from Vincent Untz 2012-01-20 20:02:25 UTC --- (In reply to comment #26)

Yay, gdm is working now! ;-) Thanks Walter...

It's a simple issue of /etc/shadow having no password for the gdm account ("!" character) - which somehow was the setting for OpenSuSE 11.4 (maybe default of 11.4 or earlier). gdm/OS12.1 isn't working with this setting. With a fresh OpenSuSE 12.1 installation, gdm account is blocked ("*" character). Exchanging "!" for "*" makes gdm work:

/etc/shadow diff: -gdm:!:13280:0:99999:7::: +gdm:*:13280:0:99999:7:::

I guess the setting should have been changed automatically when updating to OpenSuSE 12.1?

I just checked on my 11.4 test install, and the account is blocked but not locked there (ie, I have "*"). And seeing that all people affected here are Tumbleweed users, it must have been something related to Tumbleweed. No idea what, though :/ Hoping that Greg might know. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=731867 https://bugzilla.novell.com/show_bug.cgi?id=731867#c29 --- Comment #29 from Thorsten Brehm 2012-01-20 20:17:21 UTC --- I'm not using Tumbleweed, still had the issue. However, my original installation on this machine was older, so maybe the issue was introduced with an even older installation and only shows issues now. Can't remember what the initial installation on this machine was. Probably 11.0 or 10.3. Regularly updated to the latest release. I certainly never messed with the gdm user manually... -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=731867 https://bugzilla.novell.com/show_bug.cgi?id=731867#c31 Greg Kroah-Hartman changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |NEW CC| |gregkh@suse.com InfoProvider|gregkh@suse.com | --- Comment #31 from Greg Kroah-Hartman 2012-01-20 20:49:05 UTC --- I don't know of any Tumbleweed thing that would have caused this, sorry. Especially given that Tumbleweed for 12.1 right now is almost empty. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=731867 https://bugzilla.novell.com/show_bug.cgi?id=731867#c33 Vincent Untz changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |NEEDINFO InfoProvider| |maintenance@opensuse.org --- Comment #33 from Vincent Untz 2012-01-20 21:07:21 UTC --- Yeah, now it appears it's not just Tumbleweed. That's worrying :/ I don't see why the account would have got locked for some users. The gdm account is created/updated in %pre of the gdm package. But there was no big change in there; the only bit that changed is: /usr/sbin/groupadd -r gdm 2> /dev/null || : -/usr/sbin/useradd -r -o -g gdm -s /bin/false \ +/usr/sbin/useradd -r -o -g gdm -G video -s /bin/false \ -c "Gnome Display Manager daemon" -d /var/lib/gdm gdm 2> /dev/null || : -/usr/sbin/usermod -g gdm -G gdm -s /bin/false gdm 2> /dev/null +/usr/sbin/usermod -g gdm -G video -s /bin/false gdm 2> /dev/null (Translation: we're now adding the gdm user to the video group) Looking at the usermod man page, it seems it's not even possible to unlock an account that has no password... Maintenance team, do you have any opinion on the best forward? (Short summary: apparently, for some users, the gdm account is locked which breaks gdm in 12.1) -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=731867 https://bugzilla.novell.com/show_bug.cgi?id=731867#c35 --- Comment #35 from Walter Haidinger 2012-02-01 08:40:38 UTC --- Slightly OT, but I was curious where the '*' (aka blocked) password is documented. Checked the man-pages of openSUSE 12.1: passwd(5): mentions '*' in password field but doesn't explain "blocked" shadow(5): no reference crypt(3): no reference passwd(1): only hints the usage of '!' for locked pwconv(8): no reference Turns out that '*' is an arbitrary character used for blocked accounts. Like any other string not matching the password regex of crypt(3). Apparently this is not explicitly documented in the Linux manpages. OpenBSD does document this, quoting passwd(5): By convention, accounts that are not intended to be logged in to (e.g. bin, daemon, sshd) have a star (`*') in the password field. Note that there is nothing special about `*', it is just one of many strings that is not a valid encrypted password (see crypt(3)) http://www.openbsd.org/cgi-bin/man.cgi?query=passwd&sektion=5 Maybe it wouldn't hurt to include this in passwd(5) and/or shadow(5) too. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=731867 https://bugzilla.novell.com/show_bug.cgi?id=731867#c37 kk zhang changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |CLOSED CC| |kkzhang@novell.com Resolution| |NORESPONSE --- Comment #37 from kk zhang 2012-03-08 14:07:04 UTC --- Long time no response.So closed.Feel free to reopen it.Thanks. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=731867 https://bugzilla.novell.com/show_bug.cgi?id=731867#c39 --- Comment #39 from Vincent Untz 2012-07-09 16:21:58 UTC --- (In reply to comment #36)

account locking vs password locking is a historical mess and rather undefined. "passwd -u" works in your case.

Unfortunately, this won't work. The man page says the following about -u: "A system administrator can unlock the specified account, if the account is not passwordless afterwards (it will not unlock an account that has only "!" as a password)." And we're exactly in the case where the account won't be unlocked.

Alternatively don't call pam account management for the gdm user or adjust the pam config to skip callling common-account (see e.g. pam_succeed_if).

Not using pam account management for the gdm user is kind of weird -- we're using a standard session for gdm, so that sounds wrong. And I don't feel we should start working around this in pam (by adjusting the pam config). I'm really at a loss on how to properly fix this. But I'm even more worried about the fact that something locked the gdm account, and we don't know what it is :/ -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=731867 https://bugzilla.novell.com/show_bug.cgi?id=731867#c41 --- Comment #41 from Ludwig Nussel 2012-07-10 09:18:08 CEST --- gdm is a system user even though you use a pam session. The account management features like expiry or password locking have no meaning there. You can skip it just like you skip authentication. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=731867 https://bugzilla.novell.com/show_bug.cgi?id=731867#c43 Benjamin Brunner changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |REOPENED InfoProvider|maintenance@opensuse.org | --- Comment #43 from Benjamin Brunner 2012-07-13 13:58:52 CEST --- Vincent could you do a submitrequest with the updated package for 12.1, please. We'll start an update. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=731867 https://bugzilla.novell.com/show_bug.cgi?id=731867#c45 --- Comment #45 from Bernhard Wiedemann 2012-07-16 23:00:28 CEST --- This is an autogenerated message for OBS integration: This bug (731867) was mentioned in https://build.opensuse.org/request/show/128053 Factory / gdm -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=731867 https://bugzilla.novell.com/show_bug.cgi?id=731867#c47 --- Comment #47 from Swamp Workflow Management 2012-07-24 15:08:30 UTC --- openSUSE-RU-2012:0910-1: An update that has one recommended fix can now be installed. Category: recommended (low) Bug References: 731867 CVE References: Sources used: openSUSE 12.1 (src): gdm-3.2.0-5.5.1 -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.