[Bug 1314971] Re: Potential Security Issue - Having multiple users logins the administrator account without asking for password

2014-06-29 Thread Aditya
@Andrew I don't quite remember if I had installed wth automatic login or not; but I had changed that setting a couple of times (twice/thrice) from Systems Settings (Gnome Control Panel User Accounts). And I am using Ubuntu GNOME 14.04 fresh install. -- You received this bug notification

[Bug 1314971] Re: Potential Security Issue - Having multiple users logins the administrator account without asking for password

2014-06-28 Thread Andrew King
I suspect this happens when you install with automatic login, then turn it off. Or when you're using some other derived distribution. -- You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is subscribed to gdm in Ubuntu.

[Bug 1314971] Re: Potential Security Issue - Having multiple users logins the administrator account without asking for password

2014-05-01 Thread Seth Arnold
I tried to recreate this problem without success; when I created another non-administrator account, assigned both accounts passwords, and returned to the gdm screen it sat there blankly waiting for input. Please run apport-collect 1314971 to attach some debugging information to this bug report;

[Bug 1314971] Re: Potential Security Issue - Having multiple users logins the administrator account without asking for password

2014-05-01 Thread Aditya
apport information ** Tags added: apport-collected trusty ** Description changed: Basic Info: --- 1. OS: Ubuntu GNOME 14.04 (with all the updates applied till now) 2. GDM package information: $ apt-cache policy gdm gdm: Installed: 3.10.0.1-0ubuntu3

[Bug 1314971] Re: Potential Security Issue - Having multiple users logins the administrator account without asking for password

2014-05-01 Thread Aditya
Hi Seth Arnold, Give me some time, I would also upload the video showing this behavior. -- You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is subscribed to gdm in Ubuntu. https://bugs.launchpad.net/bugs/1314971 Title: Potential Security Issue -

[Bug 1314971] Re: Potential Security Issue - Having multiple users logins the administrator account without asking for password

2014-05-01 Thread Seth Arnold
Thanks for uploading the additional information; this looks like intentional behaviour: TimedLoginEnable=true TimedLogin=aditya TimedLoginDelay=10 I suspect removing these lines from your /etc/gdm/custom.conf and then restarting gdm would solve your issue. Thanks ** Changed in: gdm (Ubuntu)

[Bug 1314971] Re: Potential Security Issue - Having multiple users logins the administrator account without asking for password

2014-05-01 Thread Aditya
And I never saw the option of Timed Login anywhere. Where did that setting come from? -- You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is subscribed to gdm in Ubuntu. https://bugs.launchpad.net/bugs/1314971 Title: Potential Security Issue - Having

[Bug 1314971] Re: Potential Security Issue - Having multiple users logins the administrator account without asking for password

2014-05-01 Thread Aditya
Hi Seth Arnold, That does fix the issue. But shouldn't this default behavior change. I never touched that file myself (at least not intentionally). I had once/twice enabled automatic login for accounts (using System Settings User Accounts), but disabled it afterwards. Disabling it should have

[Bug 1314971] Re: Potential Security Issue - Having multiple users logins the administrator account without asking for password

2014-05-01 Thread Seth Arnold
I couldn't reproduce the timed login by enabling and disabling automatic account logins either. I'm not sure how the configuration options got set, hopefully a gnome expert will spot this and point out where those settings are exposed to users. Thanks -- You received this bug notification