Public bug reported:

Problem Description:
When pam_fprintd.so is enabled in the system's common-auth PAM configuration, 
cron jobs fail to execute, consistently logging "Failure setting user 
credentials" in the system logs.

[ This indicates that pam_fprintd.so (or its underlying fprintd daemon
interaction) does not gracefully handle execution within a non-
interactive, headless cron environment, thereby preventing scheduled
tasks from running. ]

Steps to Reproduce:
- Ensure libpam-fprintd and fprintd packages are installed.
*** remove the fprintd package. For me it was somehow done when doing ubuntu 
dist-upgrade from 22.04 to 24.04, leaving the SO file, 

- Ensure /etc/pam.d/cron is in its default state, containing @include 
common-auth.
- Ensure /etc/pam.d/common-auth includes the pam_fprintd.so line, specifically: 
auth [success=3 default=ignore] pam_fprintd.so max-tries=1 timeout=10 
- Add a simple test cron job for any user
- Restart cron: sudo systemctl restart cron.
- Observe system logs for cron messages.

---------------
system:

$ apt-cache policy libpam-fprintd fprintd
libpam-fprintd:
  Installed: (none)
  Candidate: 1.94.3-1
  Version table:
     1.94.3-1 500
        500 http://archive.ubuntu.com/ubuntu noble/main amd64 Packages
fprintd:
  Installed: (none)
  Candidate: 1.94.3-1
  Version table:
     1.94.3-1 500
        500 http://archive.ubuntu.com/ubuntu noble/main amd64 Packages

cnoam@noam-u:~$ sudo find /lib /usr -name "pam_fprintd.so" 
/usr/lib/x86_64-linux-gnu/security/pam_fprintd.so

cnoam@noam-u:/etc/pam.d$ lsb_release -a
No LSB modules are available.
Distributor ID: Ubuntu
Description:    Ubuntu 24.04.2 LTS
Release:        24.04
Codename:       noble

cnoam@noam-u:/etc/pam.d$ uname -a
Linux noam-u 6.8.0-62-generic #65-Ubuntu SMP PREEMPT_DYNAMIC Mon May 19 
17:15:03 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux


HARDWARE: Lenovo Thinkpad 16s

ProblemType: Bug
DistroRelease: Ubuntu 24.04
Package: libpam-fprintd (not installed)
ProcVersionSignature: Ubuntu 6.8.0-62.65-generic 6.8.12
Uname: Linux 6.8.0-62-generic x86_64
ApportVersion: 2.28.1-0ubuntu3.7
Architecture: amd64
CasperMD5CheckMismatches: ./.disk/casper-uuid-oem ./boot/grub/efi.img 
./boot/grub/grub.cfg ./casper/initrd
CasperMD5CheckResult: fail
CurrentDesktop: ubuntu:GNOME
Date: Mon Jun 23 11:07:31 2025
DistributionChannelDescriptor:
 # This is the distribution channel descriptor for the OEM CDs
 # For more information see http://wiki.ubuntu.com/DistributionChannelDescriptor
 canonical-oem-sutton-jammy-amd64-20240613-884
InstallationDate: Installed on 2024-06-28 (360 days ago)
InstallationMedia: Ubuntu 22.04 LTS "Jammy Jellyfish" - 
pc-sutton-jammy-amd64-20240613-884
SourcePackage: fprintd
UpgradeStatus: Upgraded to noble on 2025-03-15 (100 days ago)

** Affects: fprintd (Ubuntu)
     Importance: Undecided
         Status: New


** Tags: amd64 apport-bug noble

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to fprintd in Ubuntu.
https://bugs.launchpad.net/bugs/2115182

Title:
  cron fails with "Failure setting user credentials" when pam_fprintd.so
  is referenced in common-auth

Status in fprintd package in Ubuntu:
  New

Bug description:
  Problem Description:
  When pam_fprintd.so is enabled in the system's common-auth PAM configuration, 
cron jobs fail to execute, consistently logging "Failure setting user 
credentials" in the system logs.

  [ This indicates that pam_fprintd.so (or its underlying fprintd daemon
  interaction) does not gracefully handle execution within a non-
  interactive, headless cron environment, thereby preventing scheduled
  tasks from running. ]

  Steps to Reproduce:
  - Ensure libpam-fprintd and fprintd packages are installed.
  *** remove the fprintd package. For me it was somehow done when doing ubuntu 
dist-upgrade from 22.04 to 24.04, leaving the SO file, 

  - Ensure /etc/pam.d/cron is in its default state, containing @include 
common-auth.
  - Ensure /etc/pam.d/common-auth includes the pam_fprintd.so line, 
specifically: auth [success=3 default=ignore] pam_fprintd.so max-tries=1 
timeout=10 
  - Add a simple test cron job for any user
  - Restart cron: sudo systemctl restart cron.
  - Observe system logs for cron messages.

  ---------------
  system:

  $ apt-cache policy libpam-fprintd fprintd
  libpam-fprintd:
    Installed: (none)
    Candidate: 1.94.3-1
    Version table:
       1.94.3-1 500
          500 http://archive.ubuntu.com/ubuntu noble/main amd64 Packages
  fprintd:
    Installed: (none)
    Candidate: 1.94.3-1
    Version table:
       1.94.3-1 500
          500 http://archive.ubuntu.com/ubuntu noble/main amd64 Packages

  cnoam@noam-u:~$ sudo find /lib /usr -name "pam_fprintd.so" 
  /usr/lib/x86_64-linux-gnu/security/pam_fprintd.so

  cnoam@noam-u:/etc/pam.d$ lsb_release -a
  No LSB modules are available.
  Distributor ID:       Ubuntu
  Description:  Ubuntu 24.04.2 LTS
  Release:      24.04
  Codename:     noble

  cnoam@noam-u:/etc/pam.d$ uname -a
  Linux noam-u 6.8.0-62-generic #65-Ubuntu SMP PREEMPT_DYNAMIC Mon May 19 
17:15:03 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux

  
  HARDWARE: Lenovo Thinkpad 16s

  ProblemType: Bug
  DistroRelease: Ubuntu 24.04
  Package: libpam-fprintd (not installed)
  ProcVersionSignature: Ubuntu 6.8.0-62.65-generic 6.8.12
  Uname: Linux 6.8.0-62-generic x86_64
  ApportVersion: 2.28.1-0ubuntu3.7
  Architecture: amd64
  CasperMD5CheckMismatches: ./.disk/casper-uuid-oem ./boot/grub/efi.img 
./boot/grub/grub.cfg ./casper/initrd
  CasperMD5CheckResult: fail
  CurrentDesktop: ubuntu:GNOME
  Date: Mon Jun 23 11:07:31 2025
  DistributionChannelDescriptor:
   # This is the distribution channel descriptor for the OEM CDs
   # For more information see 
http://wiki.ubuntu.com/DistributionChannelDescriptor
   canonical-oem-sutton-jammy-amd64-20240613-884
  InstallationDate: Installed on 2024-06-28 (360 days ago)
  InstallationMedia: Ubuntu 22.04 LTS "Jammy Jellyfish" - 
pc-sutton-jammy-amd64-20240613-884
  SourcePackage: fprintd
  UpgradeStatus: Upgraded to noble on 2025-03-15 (100 days ago)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/fprintd/+bug/2115182/+subscriptions


-- 
Mailing list: https://launchpad.net/~desktop-packages
Post to     : [email protected]
Unsubscribe : https://launchpad.net/~desktop-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to