https://bugs.kde.org/show_bug.cgi?id=521776
Bug ID: 521776
Summary: "NoNewPrivileges" breaks KRDP PAM login
Classification: Plasma
Product: KRdp
Version First 6.7.0
Reported In:
Platform: Gentoo Packages
OS: Linux
Status: REPORTED
Severity: normal
Priority: NOR
Component: general
Assignee: [email protected]
Reporter: [email protected]
CC: [email protected]
Target Milestone: ---
DESCRIPTION
The change to enable NoNewPrivileges [1] seems to have broken PAM user login
for KRDP server. If I override NoNewPrivileges to be false, RDP connection
works again.
[1] https://invent.kde.org/plasma/krdp/-/merge_requests/177
STEPS TO REPRODUCE
1. Configure "Remote Desktop" to enable system user
2. Update Plasma to 6.7.0
3. Try to connect
OBSERVED RESULT
The connection fails. In the server-side syslog, there is something like this:
Jun 19 23:50:25 kita krdpserver[1382797]: New client connected: UNIX platform
Unspecified version
Jun 19 23:50:25 kita unix_chkpwd[1382884]: check pass; user unknown
Jun 19 23:50:25 kita unix_chkpwd[1382885]: check pass; user unknown
Jun 19 23:50:25 kita unix_chkpwd[1382885]: password check failed for user (thc)
Jun 19 23:50:25 kita krdpserver[1382797]: pam_unix(login:auth): authentication
failure; logname=thc uid=1000 euid=1000 tty= ruser= rhost= user=thc
Jun 19 23:50:28 kita krdpserver[1382797]: pam_authenticate failure:
Authentication service cannot retrieve authentication info
Jun 19 23:50:28 kita krdpserver[1382797]: [23:50:28:260] [1382797:001519d4]
[ERROR][com.freerdp.api] - [rdp_peer_handle_state_active]: PostConnect for peer
0xaaab16a35cd0 failed
Jun 19 23:50:28 kita krdpserver[1382797]: [23:50:28:261] [1382797:001519d4]
[ERROR][com.freerdp.core.transport] - [transport_check_fds]:
transport_check_fds: transport->ReceiveCallback() - STATE_RUN_FAILED [-1]
EXPECTED RESULT
The connection should succeed.
SOFTWARE/OS VERSIONS
Operating System: Gentoo Linux 2.18
KDE Plasma Version: 6.7.0
KDE Frameworks Version: 6.27.0
Qt Version: 6.11.1
--
You are receiving this mail because:
You are watching all bug changes.
