Bug#440955: bug more severe than 'important'
On sam, 2008-01-19 at 13:24 +0100, Philipp Kern wrote: Hi Loïc, On Fri, Oct 19, 2007 at 09:35:57AM +0200, Loïc Minier wrote: It seems odd that changing the pam library breaks it. IMHO it should work with either, since login works with both. It's a nice feature of login that it works with both, but gnome-screensaver did not ever work with this other pam library, so this requires some porting / fixes / compromises; so it's certainly not serious or grave. Could you please send the problem report upstream then? It is surprising that gnome-screensaver just does not cope with `normal' PAM setups. I just converted to pam-unix2 and gnome-screensaver did not cope with neither thinkfinger nor pam-unix2, so I had to kill it off. It should use PAM just like the other programs (not using sudo as an example, though). I still don’t understand why you think this is a bug in gnome-screensaver and not in pam_unix2. If this PAM module really requires the binary to be setgid shadow (as what was initially proposed), then the problem is a broken design in pam_unix2. -- .''`. : :' : We are debian.org. Lower your prices, surrender your code. `. `' We will add your hardware and software distinctiveness to `-our own. Resistance is futile. signature.asc Description: Ceci est une partie de message numériquement signée
Bug#440955: bug more severe than 'important'
Hi Loïc, On Fri, Oct 19, 2007 at 09:35:57AM +0200, Loïc Minier wrote: It seems odd that changing the pam library breaks it. IMHO it should work with either, since login works with both. It's a nice feature of login that it works with both, but gnome-screensaver did not ever work with this other pam library, so this requires some porting / fixes / compromises; so it's certainly not serious or grave. Could you please send the problem report upstream then? It is surprising that gnome-screensaver just does not cope with `normal' PAM setups. I just converted to pam-unix2 and gnome-screensaver did not cope with neither thinkfinger nor pam-unix2, so I had to kill it off. It should use PAM just like the other programs (not using sudo as an example, though). Kind regards, Philipp Kern signature.asc Description: Digital signature
Bug#440955: bug more severe than 'important'
On Thu, Oct 18, 2007, Rafal Czlonka wrote: Regression? Yes, the question was whether it ever worked. It seems odd that changing the pam library breaks it. IMHO it should work with either, since login works with both. It's a nice feature of login that it works with both, but gnome-screensaver did not ever work with this other pam library, so this requires some porting / fixes / compromises; so it's certainly not serious or grave. -- Loïc Minier
Bug#440955: bug more severe than 'important'
Package: gnome-screensaver Version: 2.20.0-1 Followup-For: Bug #440955 Hi, Recently I started using libpam-unix2 and moved from md5 to blowfish. I used to use the 'Lock Screen' option quite often, both home and at work. IMHO the bug should be reclassified to 'serious' or even 'grave' since it renders the package unusable by users who value their privacy. I cannot expect my users to switch to a virtual terminal, log in, kill the gnome-screensaver, log off and switch back to X; I don't even want them to do that. If there's any chance of fixing it, I'll be glad to help with testing. Cheers, Raf -- System Information: Debian Release: lenny/sid APT prefers unstable APT policy: (500, 'unstable'), (1, 'experimental') Architecture: powerpc (ppc) Kernel: Linux 2.6.22-2-powerpc Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Versions of packages gnome-screensaver depends on: ii dbus1.1.1-3 simple interprocess messaging syst ii gconf2 2.20.0-1 GNOME configuration database syste ii gnome-icon-theme2.20.0-1 GNOME Desktop icon theme ii libatk1.0-0 1.20.0-1 The ATK accessibility toolkit ii libc6 2.6.1-5 GNU C Library: Shared libraries ii libcairo2 1.4.10-1+b2 The Cairo 2D vector graphics libra ii libdbus-1-3 1.1.1-3 simple interprocess messaging syst ii libdbus-glib-1-20.74-1 simple interprocess messaging syst ii libfontconfig1 2.4.2-1.2generic font configuration library ii libfreetype62.3.5-1 FreeType 2 font engine, shared lib ii libgconf2-4 2.20.0-1 GNOME configuration database syste ii libgl1-mesa-swx11 [libg 7.0.1-2 A free implementation of the OpenG ii libglade2-0 1:2.6.2-1library to load .glade files at ru ii libglib2.0-02.14.1-5 The GLib library of C routines ii libgnome-menu2 2.20.0-2 an implementation of the freedeskt ii libgnomekbd12.20.0-1 GNOME library to manage keyboard c ii libgnomekbdui1 2.20.0-1 User interface library for libgnom ii libgnomevfs2-0 1:2.20.0-3 GNOME Virtual File System (runtime ii libgtk2.0-0 2.12.0-3 The GTK+ graphical user interface ii libice6 2:1.0.4-1X11 Inter-Client Exchange library ii libnotify1 [libnotify1- 0.4.4-3 sends desktop notifications to a n ii liborbit2 1:2.14.7-0.1 libraries for ORBit2 - a CORBA ORB ii libpam0g0.99.7.1-5 Pluggable Authentication Modules l ii libpango1.0-0 1.18.2-2 Layout and rendering of internatio ii libpng12-0 1.2.15~beta5-3 PNG library - runtime ii libsm6 2:1.0.3-1+b1 X11 Session Management library ii libx11-62:1.0.3-7X11 client-side library ii libxcomposite1 1:0.3.2-1+b1 X11 Composite extension library ii libxcursor1 1:1.1.9-1X cursor management library ii libxdamage1 1:1.1.1-3X11 damaged region extension libra ii libxext61:1.0.3-2X11 miscellaneous extension librar ii libxfixes3 1:4.0.3-2X11 miscellaneous 'fixes' extensio ii libxi6 2:1.1.3-1X11 Input extension library ii libxinerama11:1.0.2-1X11 Xinerama extension library ii libxklavier11 3.3-1X Keyboard Extension high-level AP ii libxml2 2.6.30.dfsg-2GNOME XML library ii libxrandr2 2:1.2.2-1X11 RandR extension library ii libxrender1 1:0.9.4-1X Rendering Extension client libra ii libxss1 1:1.1.2-1X11 Screen Saver extension library ii libxxf86misc1 1:1.0.1-2X11 XFree86 miscellaneous extensio ii libxxf86vm1 1:1.0.1-2X11 XFree86 video mode extension l ii zlib1g 1:1.2.3.3.dfsg-6 compression library - runtime Versions of packages gnome-screensaver recommends: ii gnome-power-manager 2.20.0-1 frontend for gnome-powermanager ii rss-glx 0.8.1-7Really Slick Screensavers GLX Port -- no debconf information -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#440955: bug more severe than 'important'
On Thu, Oct 18, 2007, Rafal Czlonka wrote: Recently I started using libpam-unix2 and moved from md5 to blowfish. I used to use the 'Lock Screen' option quite often, both home and at work. IMHO the bug should be reclassified to 'serious' or even 'grave' since it renders the package unusable by users who value their privacy. I cannot expect my users to switch to a virtual terminal, log in, kill the gnome-screensaver, log off and switch back to X; I don't even want them to do that. If there's any chance of fixing it, I'll be glad to help with testing. Is this behavior a regression? Or are you asking for new support for this particular combination of screen saving software and PAM stack? -- Loïc Minier
Bug#440955: bug more severe than 'important'
Loïc Minier wrote: Is this behavior a regression? Or are you asking for new support for this particular combination of screen saving software and PAM stack? Regression? It seems odd that changing the pam library breaks it. IMHO it should work with either, since login works with both. Cheers, -- Raf -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
