> well, maybe part of the issue is that people should not follow random
blogs on the internet telling them to do things

Well, perhaps that wouldn't be necessary if Ubuntu provided some
documentation regarding how to set up full system encryption. :-)

Anyway, unless you can point to something in that blog post that
inadvertently added the user account to the nopasswdlogin group, I fail
to see your point (I used the manual method, not the installation
script, so you can see all the commands and GUI steps used in the
process). Here's another "non-technical" user who appears to have run
into the same problem: http://ubuntuforums.org/showthread.php?t=1662174.

It would be very helpful if we could identify how a user account might
come to be added to the nopasswdlogin group (aside from "technical"
users who know exactly what they're doing explicitly adding their
account to the group). It's clear that some people are ending up with
that setting without taking any explicit action to do so. Is it possible
that merely enabling auto-login upon installation results in the account
being added to the group? If not, any other ideas?

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to lightdm in Ubuntu.
https://bugs.launchpad.net/bugs/987330

Title:
  Insecure login -- not requesting password

Status in “lightdm” package in Ubuntu:
  Invalid

Bug description:
  When I click the login link from the login page, my password is never
  requested -- instead, I am simply automatically logged in. This
  happens whether I get to the login screen via (1) starting up the
  machine, (2) logging out of a session, or (3) locking the screen and
  then clicking the "Switch user" button on the locked screen dialog.

  My entire system is encrypted in a LUKS volume, so I had initially
  turned automatic login on, as I thought login via password would be
  unnecessary given that I already have to enter my LUKS password to
  start up the machine. However, I noticed that when I locked my screen,
  instead of needing to provide my account password to unlock it, I
  could simply click "Switch user", and instead of switching to another
  user (there are no other users on my machine), I could then just click
  "Login" for my own account, and it would let me in without requesting
  my password. I thought this might be due to the automatic login
  setting, so I turned off automatic login. I have confirmed that the
  "autologin-user=<username>" line in /etc/lightdm/lightdm.conf has
  changed to "auto-login=". Also, now that automatic login is off, I do
  get the login screen when I first start up the machine -- yet it still
  does not require my password. So, I don't think the problem is related
  to automatic login, as it happens with our without automatic login
  turned on.

  ProblemType: Bug
  DistroRelease: Ubuntu 12.04
  Package: lightdm 1.2.1-0ubuntu1
  ProcVersionSignature: Ubuntu 3.2.0-23.36-generic 3.2.14
  Uname: Linux 3.2.0-23-generic x86_64
  NonfreeKernelModules: nvidia
  ApportVersion: 2.0.1-0ubuntu5
  Architecture: amd64
  Date: Mon Apr 23 09:10:05 2012
  InstallationMedia: Ubuntu 12.04 LTS "Precise Pangolin" - Beta amd64 (20120328)
  ProcEnviron:
   TERM=xterm
   LC_COLLATE=C
   PATH=(custom, no user)
   LANG=en_US.UTF-8
   SHELL=/bin/bash
  SourcePackage: lightdm
  UpgradeStatus: No upgrade log present (probably fresh install)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/lightdm/+bug/987330/+subscriptions

-- 
Mailing list: https://launchpad.net/~desktop-packages
Post to     : [email protected]
Unsubscribe : https://launchpad.net/~desktop-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to