Package: gnome-screensaver
Version: 2.14.3-1
Severity: important

The unlock dialog always reports the passwd is invalid. In my
/var/log/auth.log I see to following every time it fails;

Aug 20 14:13:28 pirli gnome-screensaver-dialog: (pam_unix)
authentication failure; logname= uid=1000 euid=1000 tty=:0.0 ruser=
rhost=  user=abo
Aug 20 14:13:30 pirli gnome-screensaver-dialog: (pam_unix)
authentication failure; logname= uid=1000 euid=1000 tty=:0.0 ruser=
rhost=  user=root

I have /etc/nsswitch.conf configured to use LDAP;
:
passwd:         compat ldap
group:          compat ldap
shadow:         compat ldap
:

And /etc/libnss-ldap.conf configured so that the pam_unix
authentication works (ie "getent shadow" as root shows the encrypted
passwords), and everything is configured as the default to use
pam_unix. My /etc/pam.d/common-auth looks like;

auth    required        pam_unix.so nullok_secure

I am running nscd, and everything else authenticates fine. I suspect
that gnome-screensaver is doing something dumb like looking in some
config files, noticing LDAP and trying to authenticate against it
instead of just doing what the pam config says.

Either that or it needs to be suid root to do the authentication...
but surely it would need that to read /etc/shadow on a non-LDAP'ed
system too.

-- System Information:
Debian Release: testing/unstable
  APT prefers testing
  APT policy: (500, 'testing'), (100, 'unstable')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.16-2-k7
Locale: LANG=en_AU.UTF-8, LC_CTYPE=en_AU.UTF-8 (charmap=UTF-8)

Versions of packages gnome-screensaver depends on:
ii  dbus                       0.62-4        simple interprocess messaging syst
ii  gconf2                     2.14.0-4      GNOME configuration database syste
ii  libart-2.0-2               2.3.17-1      Library of functions for 2D graphi
ii  libatk1.0-0                1.12.1-1      The ATK accessibility toolkit
ii  libaudiofile0              0.2.6-6       Open-source version of SGI's audio
ii  libavahi-client3           0.6.12-1      Avahi client library
ii  libavahi-common3           0.6.12-1      Avahi common library
ii  libavahi-glib1             0.6.12-1      Avahi glib integration library
ii  libbonobo2-0               2.14.0-1      Bonobo CORBA interfaces library
ii  libbonoboui2-0             2.14.0-3      The Bonobo UI library
ii  libc6                      2.3.6-15      GNU C Library: Shared libraries
ii  libcairo2                  1.2.2-1       The Cairo 2D vector graphics libra
ii  libdbus-1-2                0.62-4        simple interprocess messaging syst
ii  libdbus-glib-1-2           0.62-4        simple interprocess messaging syst
ii  libesd-alsa0 [libesd0]     0.2.36-3      Enlightened Sound Daemon (ALSA) - 
ii  libexif12                  0.6.13-4      library to parse EXIF files
ii  libfontconfig1             2.3.2-7       generic font configuration library
ii  libfreetype6               2.2.1-2       FreeType 2 font engine, shared lib
ii  libgconf2-4                2.14.0-4      GNOME configuration database syste
ii  libgcrypt11                1.2.2-3       LGPL Crypto library - runtime libr
ii  libglade2-0                1:2.5.1-2     library to load .glade files at ru
ii  libglib2.0-0               2.10.3-3      The GLib library of C routines
ii  libgnome-keyring0          0.4.9-1       GNOME keyring services library
ii  libgnome-menu2             2.14.3-1      an implementation of the freedeskt
ii  libgnome2-0                2.14.1-2      The GNOME 2 library - runtime file
ii  libgnomecanvas2-0          2.14.0-2      A powerful object-oriented display
ii  libgnomeui-0               2.14.1-2      The GNOME 2 libraries (User Interf
ii  libgnomevfs2-0             2.14.2-1      GNOME virtual file-system (runtime
ii  libgnutls13                1.4.2-1       the GNU TLS library - runtime libr
ii  libgpg-error0              1.2-1         library for common error values an
ii  libgtk2.0-0                2.8.18-1      The GTK+ graphical user interface 
ii  libice6                    1:1.0.0-3     X11 Inter-Client Exchange library
ii  libjpeg62                  6b-13         The Independent JPEG Group's JPEG 
ii  liborbit2                  1:2.14.0-2    libraries for ORBit2 - a CORBA ORB
ii  libpam0g                   0.79-3.1      Pluggable Authentication Modules l
ii  libpango1.0-0              1.12.3-1+b1   Layout and rendering of internatio
ii  libpng12-0                 1.2.8rel-5.2  PNG library - runtime
ii  libpopt0                   1.10-2        lib for parsing cmdline parameters
ii  libsm6                     1:1.0.0-4     X11 Session Management library
ii  libtasn1-3                 0.3.5-2       Manage ASN.1 structures (runtime)
ii  libx11-6                   2:1.0.0-8     X11 client-side library
ii  libxau6                    1:1.0.0-3     X11 authorisation library
ii  libxcursor1                1.1.5.2-5     X cursor management library
ii  libxext6                   1:1.0.0-4     X11 miscellaneous extension librar
ii  libxfixes3                 1:3.0.1.2-4   X11 miscellaneous 'fixes' extensio
ii  libxi6                     1:1.0.0-5     X11 Input extension library
ii  libxinerama1               1:1.0.1-4     X11 Xinerama extension library
ii  libxml2                    2.6.26.dfsg-3 GNOME XML library
ii  libxrandr2                 2:1.1.0.2-4   X11 RandR extension library
ii  libxrender1                1:0.9.0.2-4   X Rendering Extension client libra
ii  libxss1                    1:1.0.1-4     X11 Screen Saver extension library
ii  libxxf86misc1              1:1.0.0-4     X11 XFree86 miscellaneous extensio
ii  libxxf86vm1                1:1.0.0-4     X11 XFree86 video mode extension l
ii  zlib1g                     1:1.2.3-13    compression library - runtime

Versions of packages gnome-screensaver recommends:
pn  gnome-power-manager           <none>     (no description available)

-- no debconf information


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to