[Bug 1630156] Re: No password needed to Log in after cancel the password and then reset again
** Changed in: oem-priority/xenial Status: Confirmed => Fix Released ** Changed in: oem-priority/trusty Status: Confirmed => Fix Committed ** Changed in: oem-priority Status: Triaged => Fix Released ** Changed in: oem-priority/trusty Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1630156 Title: No password needed to Log in after cancel the password and then reset again To manage notifications about this bug go to: https://bugs.launchpad.net/lightdm/+bug/1630156/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1630156] Re: No password needed to Log in after cancel the password and then reset again
This bug was fixed in the package unity-control-center - 15.04.0+16.04.20170214-0ubuntu1 --- unity-control-center (15.04.0+16.04.20170214-0ubuntu1) xenial; urgency=medium [ Iain Lane ] * user-accounts: Reset the AccountsService password mode when setting the password. There's a codepath for directly setting the password when the user is setting their own, but this doesn't set the AS mode back to ACT_USER_PASSWORD_MODE_REGULAR. If you don't change this and you're in ACT_USER_PASSWORD_MODE_NONE, then you end up staying in the nopasswdlogin group. (LP: #1630156) [ Robert Ancell ] * Add AppData (LP: #1639507) -- i...@orangesquash.org.uk (i...@orangesquash.org.uk) Tue, 14 Feb 2017 09:17:30 + ** Changed in: unity-control-center (Ubuntu Xenial) Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1630156 Title: No password needed to Log in after cancel the password and then reset again To manage notifications about this bug go to: https://bugs.launchpad.net/lightdm/+bug/1630156/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1630156] Re: No password needed to Log in after cancel the password and then reset again
This bug was fixed in the package unity-control-center - 15.04.0+16.10.20170214-0ubuntu1 --- unity-control-center (15.04.0+16.10.20170214-0ubuntu1) yakkety; urgency=medium [ Iain Lane ] * user-accounts: Reset the AccountsService password mode when setting the password. There's a codepath for directly setting the password when the user is setting their own, but this doesn't set the AS mode back to ACT_USER_PASSWORD_MODE_REGULAR. If you don't change this and you're in ACT_USER_PASSWORD_MODE_NONE, then you end up staying in the nopasswdlogin group. (LP: #1630156) [ Robert Ancell ] * Add AppData (LP: #1639507) -- i...@orangesquash.org.uk (i...@orangesquash.org.uk) Tue, 14 Feb 2017 09:16:44 + ** Changed in: unity-control-center (Ubuntu Yakkety) Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1630156 Title: No password needed to Log in after cancel the password and then reset again To manage notifications about this bug go to: https://bugs.launchpad.net/lightdm/+bug/1630156/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1630156] Re: No password needed to Log in after cancel the password and then reset again
k, I've verified unity-control-center 15.04.0+16.10.20170214-0ubuntu1 from yakkety-proposed and it resolves the issue on my vm installation, setting as verification-done-yakkety ** Tags added: verification-done-trusty ** Tags removed: verification-done-trusty ** Tags added: verification-done-yakkety -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1630156 Title: No password needed to Log in after cancel the password and then reset again To manage notifications about this bug go to: https://bugs.launchpad.net/lightdm/+bug/1630156/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1630156] Re: No password needed to Log in after cancel the password and then reset again
The verified Xenial update is being held back by this being unverified on Yakkety. Could someone please verify this update on Yakkety, so we can release this update? -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1630156 Title: No password needed to Log in after cancel the password and then reset again To manage notifications about this bug go to: https://bugs.launchpad.net/lightdm/+bug/1630156/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1630156] Re: No password needed to Log in after cancel the password and then reset again
** Changed in: oem-priority Importance: Medium => Low ** Changed in: oem-priority/trusty Importance: Medium => Low ** Changed in: oem-priority/xenial Importance: Medium => Low -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1630156 Title: No password needed to Log in after cancel the password and then reset again To manage notifications about this bug go to: https://bugs.launchpad.net/lightdm/+bug/1630156/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1630156] Re: No password needed to Log in after cancel the password and then reset again
** Tags removed: verification-done ** Tags added: verification-done-xenial -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1630156 Title: No password needed to Log in after cancel the password and then reset again To manage notifications about this bug go to: https://bugs.launchpad.net/lightdm/+bug/1630156/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1630156] Re: No password needed to Log in after cancel the password and then reset again
** Changed in: oem-priority Status: In Progress => Triaged ** Changed in: oem-priority Importance: High => Medium ** Changed in: oem-priority/trusty Importance: High => Medium ** Changed in: oem-priority/xenial Importance: High => Medium -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1630156 Title: No password needed to Log in after cancel the password and then reset again To manage notifications about this bug go to: https://bugs.launchpad.net/lightdm/+bug/1630156/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1630156] Re: No password needed to Log in after cancel the password and then reset again
** Changed in: oem-priority Importance: Critical => High ** Changed in: oem-priority/trusty Importance: Critical => High ** Changed in: oem-priority/xenial Importance: Critical => High -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1630156 Title: No password needed to Log in after cancel the password and then reset again To manage notifications about this bug go to: https://bugs.launchpad.net/lightdm/+bug/1630156/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1630156] Re: No password needed to Log in after cancel the password and then reset again
** Tags added: desktop -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1630156 Title: No password needed to Log in after cancel the password and then reset again To manage notifications about this bug go to: https://bugs.launchpad.net/lightdm/+bug/1630156/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1630156] Re: No password needed to Log in after cancel the password and then reset again
per #22, mark as verification-done, and open a new bug LP: #1667222. ** Tags removed: n+1 trusty verification-failed verification-needed ** Tags added: verification-done -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1630156 Title: No password needed to Log in after cancel the password and then reset again To manage notifications about this bug go to: https://bugs.launchpad.net/lightdm/+bug/1630156/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1630156] Re: No password needed to Log in after cancel the password and then reset again
My two cents: I think we should release this fix anyway as it fixes a potential security issue. I think the use case described by YC doesn't affect this fix in a way which should prevent release. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1630156 Title: No password needed to Log in after cancel the password and then reset again To manage notifications about this bug go to: https://bugs.launchpad.net/lightdm/+bug/1630156/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
Re: [Bug 1630156] Re: No password needed to Log in after cancel the password and then reset again
On Wed, Feb 22, 2017 at 03:27:00AM -, Yuan-Chen Cheng wrote: > I run the test case on xenial with the new package, it works fine and > the test case passed ! > > But as I replace step 7 to: > > close the "user accounts panel" and make sure we quit all instance of > unity-control-center, and launch "user accounts panel" again, and choose > to Re-open the password dialog as in step 4. > > Then the test failed with after re-launch user account panel in the way > > 1. can't ""Click "Unlock" at the top right, and enter the user's password."" > because the password is clear in step 5. > 2. if we just change the password without unlock first, the system request > password prompt "Authentication is required to change user data". Any > password won't work for it. Then I need to press 'cancel' button, then the > password is set, but user still in nopasswdlogin group. > > I propose we refine the bug description instead of open a new bug. Feel > free to propose otherwise. TBH it's up to you. If you're saying this is a partial fix but doesn't fix the main part of the problem for you then you can either release this SRU and do another one to fix the rest of it, or block this one. It doesn't really matter to me. I would appreciate it if someone could help out on figuring out what the problem is here though. Is it something to do with deleting the password when you go to ACT_USER_PASSWORD_MODE_NONE? If so, what's the right thing to do? And also, what happens if you operate on a user other than the current one? -- Iain Lane [ i...@orangesquash.org.uk ] Debian Developer [ la...@debian.org ] Ubuntu Developer [ la...@ubuntu.com ] -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1630156 Title: No password needed to Log in after cancel the password and then reset again To manage notifications about this bug go to: https://bugs.launchpad.net/lightdm/+bug/1630156/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1630156] Re: No password needed to Log in after cancel the password and then reset again
I run the test case on xenial with the new package, it works fine and the test case passed ! But as I replace step 7 to: close the "user accounts panel" and make sure we quit all instance of unity-control-center, and launch "user accounts panel" again, and choose to Re-open the password dialog as in step 4. Then the test failed with after re-launch user account panel in the way 1. can't ""Click "Unlock" at the top right, and enter the user's password."" because the password is clear in step 5. 2. if we just change the password without unlock first, the system request password prompt "Authentication is required to change user data". Any password won't work for it. Then I need to press 'cancel' button, then the password is set, but user still in nopasswdlogin group. I propose we refine the bug description instead of open a new bug. Feel free to propose otherwise. ** Tags added: verification-failed -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1630156 Title: No password needed to Log in after cancel the password and then reset again To manage notifications about this bug go to: https://bugs.launchpad.net/lightdm/+bug/1630156/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1630156] Re: No password needed to Log in after cancel the password and then reset again
Try to upgrade unity-control-center form proposed, but found the package version is 15.04.0+16.04.20170214-0ubuntu1 $ sudo apt-get install unity-control-center/xenial-proposed Reading package lists... Done Building dependency tree Reading state information... Done Selected version '15.04.0+16.04.20170214-0ubuntu1' (Ubuntu:16.04/xenial-proposed [amd64]) for 'unity-control-center' -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1630156 Title: No password needed to Log in after cancel the password and then reset again To manage notifications about this bug go to: https://bugs.launchpad.net/lightdm/+bug/1630156/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1630156] Re: No password needed to Log in after cancel the password and then reset again
** Changed in: lightdm Status: New => Invalid -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1630156 Title: No password needed to Log in after cancel the password and then reset again To manage notifications about this bug go to: https://bugs.launchpad.net/lightdm/+bug/1630156/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1630156] Re: No password needed to Log in after cancel the password and then reset again
** No longer affects: lightdm (Ubuntu) ** No longer affects: lightdm (Ubuntu Xenial) ** No longer affects: lightdm (Ubuntu Yakkety) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1630156 Title: No password needed to Log in after cancel the password and then reset again To manage notifications about this bug go to: https://bugs.launchpad.net/lightdm/+bug/1630156/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1630156] Re: No password needed to Log in after cancel the password and then reset again
Accepted unity-control-center into -proposed. The package will build now and be available at https://launchpad.net/ubuntu/+source/unity-control- center/15.04.0+16.10.20170214-0ubuntu1 in a few hours, and then in the -proposed repository. Please help us by testing this new package. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation on how to enable and use -proposed.Your feedback will aid us getting this update out to other Ubuntu users. If this package fixes the bug for you, please add a comment to this bug, mentioning the version of the package you tested, and change the tag from verification-needed to verification-done. If it does not fix the bug for you, please add a comment stating that, and change the tag to verification-failed. In either case, details of your testing will help us make a better decision. Further information regarding the verification process can be found at https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in advance! ** Changed in: unity-control-center (Ubuntu Xenial) Importance: Undecided => High ** Changed in: unity-control-center (Ubuntu Xenial) Status: In Progress => Fix Committed ** Changed in: unity-control-center (Ubuntu Yakkety) Importance: Undecided => High ** Changed in: unity-control-center (Ubuntu Yakkety) Status: In Progress => Fix Committed ** Tags added: verification-needed -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1630156 Title: No password needed to Log in after cancel the password and then reset again To manage notifications about this bug go to: https://bugs.launchpad.net/lightdm/+bug/1630156/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1630156] Re: No password needed to Log in after cancel the password and then reset again
On Tue, Feb 14, 2017 at 08:50:22AM -, Amr Ibrahim wrote: > The Xenial changelog in the unapproved queue is missing the LP bug > number. Thanks for your dilligence. -- Iain Lane [ i...@orangesquash.org.uk ] Debian Developer [ la...@debian.org ] Ubuntu Developer [ la...@ubuntu.com ] ** Branch linked: lp:~laney/unity-control-center/lp1630156-16.04 ** Branch linked: lp:~laney/unity-control-center/lp1630156-16.10 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1630156 Title: No password needed to Log in after cancel the password and then reset again To manage notifications about this bug go to: https://bugs.launchpad.net/lightdm/+bug/1630156/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1630156] Re: No password needed to Log in after cancel the password and then reset again
The Xenial changelog in the unapproved queue is missing the LP bug number. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1630156 Title: No password needed to Log in after cancel the password and then reset again To manage notifications about this bug go to: https://bugs.launchpad.net/lightdm/+bug/1630156/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1630156] Re: No password needed to Log in after cancel the password and then reset again
This bug was fixed in the package unity-control-center - 15.04.0+17.04.20170213-0ubuntu1 --- unity-control-center (15.04.0+17.04.20170213-0ubuntu1) zesty; urgency=medium [ Iain Lane ] * user-accounts: Reset the AccountsService password mode when setting the password. There's a codepath for directly setting the password when the user is setting their own, but this doesn't set the AS mode back to ACT_USER_PASSWORD_MODE_REGULAR. If you don't change this and you're in ACT_USER_PASSWORD_MODE_NONE, then you end up staying in the nopasswdlogin group. (LP: #1630156) [ Robert Ancell ] * Add AppData (LP: #1639507) -- i...@orangesquash.org.uk (i...@orangesquash.org.uk) Mon, 13 Feb 2017 10:04:53 + ** Changed in: unity-control-center (Ubuntu) Status: Triaged => Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1630156 Title: No password needed to Log in after cancel the password and then reset again To manage notifications about this bug go to: https://bugs.launchpad.net/lightdm/+bug/1630156/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1630156] Re: No password needed to Log in after cancel the password and then reset again
** Changed in: unity-control-center (Ubuntu Xenial) Status: Confirmed => In Progress ** Changed in: unity-control-center (Ubuntu Xenial) Assignee: (unassigned) => Iain Lane (laney) ** Changed in: unity-control-center (Ubuntu Yakkety) Status: Confirmed => In Progress ** Changed in: unity-control-center (Ubuntu Yakkety) Assignee: (unassigned) => Iain Lane (laney) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1630156 Title: No password needed to Log in after cancel the password and then reset again To manage notifications about this bug go to: https://bugs.launchpad.net/lightdm/+bug/1630156/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1630156] Re: No password needed to Log in after cancel the password and then reset again
Status changed to 'Confirmed' because the bug affects multiple users. ** Changed in: lightdm (Ubuntu Yakkety) Status: New => Confirmed -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1630156 Title: No password needed to Log in after cancel the password and then reset again To manage notifications about this bug go to: https://bugs.launchpad.net/lightdm/+bug/1630156/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1630156] Re: No password needed to Log in after cancel the password and then reset again
Status changed to 'Confirmed' because the bug affects multiple users. ** Changed in: unity-control-center (Ubuntu Yakkety) Status: New => Confirmed -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1630156 Title: No password needed to Log in after cancel the password and then reset again To manage notifications about this bug go to: https://bugs.launchpad.net/lightdm/+bug/1630156/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1630156] Re: No password needed to Log in after cancel the password and then reset again
Status changed to 'Confirmed' because the bug affects multiple users. ** Changed in: lightdm (Ubuntu Xenial) Status: New => Confirmed -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1630156 Title: No password needed to Log in after cancel the password and then reset again To manage notifications about this bug go to: https://bugs.launchpad.net/lightdm/+bug/1630156/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1630156] Re: No password needed to Log in after cancel the password and then reset again
Status changed to 'Confirmed' because the bug affects multiple users. ** Changed in: unity-control-center (Ubuntu Xenial) Status: New => Confirmed -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1630156 Title: No password needed to Log in after cancel the password and then reset again To manage notifications about this bug go to: https://bugs.launchpad.net/lightdm/+bug/1630156/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1630156] Re: No password needed to Log in after cancel the password and then reset again
** Changed in: oem-priority Status: Confirmed => In Progress -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1630156 Title: No password needed to Log in after cancel the password and then reset again To manage notifications about this bug go to: https://bugs.launchpad.net/lightdm/+bug/1630156/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1630156] Re: No password needed to Log in after cancel the password and then reset again
** Description changed: - Initially tested on OS: 14.04 trusty + [ Description ] - Also Tested with 16.04 (xenial, LTS) and 16.10 (yakkety) - lightdm version is 1.18.2 and 1.19.5 - one test on xenial is over unity-control-center 15.04.0+16.04.20160705-0ubuntu1. - issue still exist + If you use unity-control-center to set the current user from "Log in + without a password" to having a password again, the user is not removed + from the 'nopasswdlogin' UNIX group, and so can log in without a + password still. + + [ Test case ] + + 1. Open the dash, type "User Accounts", open the user accounts panel of unity-control-center. + 2. Make sure the current user (which must be an admin) is selected in the list of user's on the left hand side. + 3. Click "Unlock" at the top right, and enter the user's password. + 4. Click the dots to the right of "Password", to open the dialog where you can change the password mode. + 5. In the combo box at the top, select "Log in without a password". Save the dialog. + 6. Open a terminal, and execute `grep nopasswdlogin /etc/group'. Note that the current user is present. + 7. Re-open the password dialog as in step 4. + 8. Select "Set a password now", and set a password. Save the dialog. + 9. Open a terminal, and execute `grep nopasswdlogin /etc/group'. + + At step 9, if the bug is present then the user will still be in the + group. If it is fixed then the user will not. + + [ Fix ] + + unity-control-center's user-accounts panel contains a codepath to call + `passwd' directly when changing the current user's password. There's + another path when setting the password for a different user which uses + AccountsService. In the former codepath, the AccountsService call + required to remove the user from `nopasswdlogin' is not executed + (act_user_set_password_mode (..., ACT_USER_PASSWORD_MODE_REGULAR)). + + The proposed fix (in the attached MP) is to always make this call when + setting a password, even in this passwd case. + + [ QA ] + + Run the test case above. Additionally, + + - Try to use the dialog to change passwords without unlocking it. + - Try to change both the current and another user's password. + + Make sure the nopasswdlogin membership is right at all times and the new + password always gets applied (e.g. try logging out and in to check the + settings). + + [ Regression potential ] + + The fix changes a couple of things + + - We now call act_user_set_password_mode () after running passwd. + - We now call act_user_set_password () before act_user_set_password_mode (), which is the opposite of the previous order. + + AFAIK both of these changes are fine, but we should run the QA tests + above to get confidence that they didn't break password setting. + + [ Original description ] 1. Go to path "System Setting --> User Accounts--> Unlock" to unlock system setting. 2. Click "Password --> Action --> Log in without password -->Change to clear Log in password. (as doing so, the user is added to group "nopasswdlogin") 3. Check that the user is in the nopasswdlogin group 4. Then do the similar action "Set a password now" as the same way to set Log in password. 5. Check that the user is *not* in the nopasswdlogin group. The key problem is: it won't remove user from nopasswdlogin in step 4. At step 5, you are left in the group. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1630156 Title: No password needed to Log in after cancel the password and then reset again To manage notifications about this bug go to: https://bugs.launchpad.net/lightdm/+bug/1630156/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1630156] Re: No password needed to Log in after cancel the password and then reset again
** Changed in: unity-control-center (Ubuntu) Assignee: (unassigned) => Iain Lane (laney) ** Changed in: unity-control-center (Ubuntu) Status: New => Triaged ** Changed in: unity-control-center (Ubuntu) Importance: Undecided => High ** Also affects: lightdm (Ubuntu Yakkety) Importance: Undecided Status: New ** Also affects: unity-control-center (Ubuntu Yakkety) Importance: Undecided Status: New ** Also affects: lightdm (Ubuntu Xenial) Importance: Undecided Status: New ** Also affects: unity-control-center (Ubuntu Xenial) Importance: Undecided Status: New -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1630156 Title: No password needed to Log in after cancel the password and then reset again To manage notifications about this bug go to: https://bugs.launchpad.net/lightdm/+bug/1630156/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1630156] Re: No password needed to Log in after cancel the password and then reset again
Mmm, I did manage to reproduce and I think I fixed it. ** Description changed: Initially tested on OS: 14.04 trusty Also Tested with 16.04 (xenial, LTS) and 16.10 (yakkety) lightdm version is 1.18.2 and 1.19.5 one test on xenial is over unity-control-center 15.04.0+16.04.20160705-0ubuntu1. issue still exist 1. Go to path "System Setting --> User Accounts--> Unlock" to unlock system setting. 2. Click "Password --> Action --> Log in without password -->Change to clear Log in password. (as doing so, the user is added to group "nopasswdlogin") - 3. Reboot and log to desktop without password. - 4. Then do the similar action "Set a password now" as the same way to set Log in password. (as doing so, the user won't be removed from group "nopasswdlogin") - 5. Reboot but still no password needed at Log in interface. + 3. Check that the user is in the nopasswdlogin group + 4. Then do the similar action "Set a password now" as the same way to set Log in password. + 5. Check that the user is *not* in the nopasswdlogin group. The key problem is: it won't remove user from nopasswdlogin in step 4. + At step 5, you are left in the group. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1630156 Title: No password needed to Log in after cancel the password and then reset again To manage notifications about this bug go to: https://bugs.launchpad.net/lightdm/+bug/1630156/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1630156] Re: No password needed to Log in after cancel the password and then reset again
** Branch linked: lp:~laney/unity-control-center/lp1630156 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1630156 Title: No password needed to Log in after cancel the password and then reset again To manage notifications about this bug go to: https://bugs.launchpad.net/lightdm/+bug/1630156/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1630156] Re: No password needed to Log in after cancel the password and then reset again
I confirm it also reproducible (user added to group "nopasswdlogin" and won't be removed.) in 17.04 current image today. (downloaded from http://cdimage.ubuntu.com/daily-live/current/) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1630156 Title: No password needed to Log in after cancel the password and then reset again To manage notifications about this bug go to: https://bugs.launchpad.net/lightdm/+bug/1630156/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1630156] Re: No password needed to Log in after cancel the password and then reset again
** Description changed: Initially tested on OS: 14.04 trusty Also Tested with 16.04 (xenial, LTS) and 16.10 (yakkety) lightdm version is 1.18.2 and 1.19.5 - one test on xenial is over unity-control-center 15.04.0+16.04.20160705-0ubuntu1. more info soon. + one test on xenial is over unity-control-center 15.04.0+16.04.20160705-0ubuntu1. issue still exist 1. Go to path "System Setting --> User Accounts--> Unlock" to unlock system setting. - 2. Click "Password --> Action --> Log in without password -->Change to clear Log in password. + 2. Click "Password --> Action --> Log in without password -->Change to clear Log in password. (as doing so, the user is added to group "nopasswdlogin") 3. Reboot and log to desktop without password. - 4. Then do the similar action "Set a password now" as the same way to set Log in password. + 4. Then do the similar action "Set a password now" as the same way to set Log in password. (as doing so, the user won't be removed from group "nopasswdlogin") 5. Reboot but still no password needed at Log in interface. + + The key problem is: it won't remove user from nopasswdlogin in step 4. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1630156 Title: No password needed to Log in after cancel the password and then reset again To manage notifications about this bug go to: https://bugs.launchpad.net/lightdm/+bug/1630156/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1630156] Re: No password needed to Log in after cancel the password and then reset again
** Description changed: Initially tested on OS: 14.04 trusty Also Tested with 16.04 (xenial, LTS) and 16.10 (yakkety) lightdm version is 1.18.2 and 1.19.5 + one test on xenial is over unity-control-center 15.04.0+16.04.20160705-0ubuntu1. more info soon. issue still exist 1. Go to path "System Setting --> User Accounts--> Unlock" to unlock system setting. 2. Click "Password --> Action --> Log in without password -->Change to clear Log in password. 3. Reboot and log to desktop without password. 4. Then do the similar action "Set a password now" as the same way to set Log in password. 5. Reboot but still no password needed at Log in interface. ** Changed in: oem-priority/xenial Importance: Undecided => Critical -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1630156 Title: No password needed to Log in after cancel the password and then reset again To manage notifications about this bug go to: https://bugs.launchpad.net/lightdm/+bug/1630156/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1630156] Re: No password needed to Log in after cancel the password and then reset again
** Changed in: oem-priority/xenial Status: New => Confirmed ** Also affects: unity-control-center Importance: Undecided Status: New ** Project changed: unity-control-center => unity-control-center (Ubuntu) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1630156 Title: No password needed to Log in after cancel the password and then reset again To manage notifications about this bug go to: https://bugs.launchpad.net/lightdm/+bug/1630156/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1630156] Re: No password needed to Log in after cancel the password and then reset again
** Also affects: oem-priority/xenial Importance: Undecided Status: New ** Description changed: - OS: 14.04 trusty + Initially tested on OS: 14.04 trusty - Tested with 16.10 - lightdm version is 1.19.5 + Also Tested with 16.04 (xenial, LTS) and 16.10 (yakkety) + lightdm version is 1.18.2 and 1.19.5 issue still exist - 1. Go to path "System Setting --> User Accounts--> Unlock" to unlock system setting. 2. Click "Password --> Action --> Log in without password -->Change to clear Log in password. 3. Reboot and log to desktop without password. 4. Then do the similar action "Set a password now" as the same way to set Log in password. 5. Reboot but still no password needed at Log in interface. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1630156 Title: No password needed to Log in after cancel the password and then reset again To manage notifications about this bug go to: https://bugs.launchpad.net/lightdm/+bug/1630156/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1630156] Re: No password needed to Log in after cancel the password and then reset again
** Tags added: trusty -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1630156 Title: No password needed to Log in after cancel the password and then reset again To manage notifications about this bug go to: https://bugs.launchpad.net/lightdm/+bug/1630156/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1630156] Re: No password needed to Log in after cancel the password and then reset again
** Tags added: n+1 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1630156 Title: No password needed to Log in after cancel the password and then reset again To manage notifications about this bug go to: https://bugs.launchpad.net/lightdm/+bug/1630156/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1630156] Re: No password needed to Log in after cancel the password and then reset again
Sounds like a duplicate of bug 1499675. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1630156 Title: No password needed to Log in after cancel the password and then reset again To manage notifications about this bug go to: https://bugs.launchpad.net/lightdm/+bug/1630156/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1630156] Re: No password needed to Log in after cancel the password and then reset again
The issue is not a lightdm one if the user is still is the nopasswdlogin group, can't reproduce it on a xenial installation though. When you set the new password the change stick to the UI, it reflects after validating that a password has been set? Doing those steps on a test install the user is removed from the group when the new password is set... -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1630156 Title: No password needed to Log in after cancel the password and then reset again To manage notifications about this bug go to: https://bugs.launchpad.net/lightdm/+bug/1630156/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1630156] Re: No password needed to Log in after cancel the password and then reset again
** Changed in: lightdm (Ubuntu) Assignee: (unassigned) => Robert Ancell (robert-ancell) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1630156 Title: No password needed to Log in after cancel the password and then reset again To manage notifications about this bug go to: https://bugs.launchpad.net/lightdm/+bug/1630156/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1630156] Re: No password needed to Log in after cancel the password and then reset again
Output of command "groups" u adm cdrom sudo dip plugdev nopasswdlogin lpadmin sambashare and lightdm.log as attached ** Attachment added: "lightdm.log" https://bugs.launchpad.net/ubuntu/+source/lightdm/+bug/1630156/+attachment/4762229/+files/lightdm.log -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1630156 Title: No password needed to Log in after cancel the password and then reset again To manage notifications about this bug go to: https://bugs.launchpad.net/lightdm/+bug/1630156/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1630156] Re: No password needed to Log in after cancel the password and then reset again
Also attaching the contents of /var/log/lightdm/lightdm.log after logging in will give more information. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1630156 Title: No password needed to Log in after cancel the password and then reset again To manage notifications about this bug go to: https://bugs.launchpad.net/lightdm/+bug/1630156/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1630156] Re: No password needed to Log in after cancel the password and then reset again
Can you check at step 5 if the user is still in the "nopasswdlogin" group? i.e. by running 'groups' as that user or checking the contents of /etc/group -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1630156 Title: No password needed to Log in after cancel the password and then reset again To manage notifications about this bug go to: https://bugs.launchpad.net/lightdm/+bug/1630156/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1630156] Re: No password needed to Log in after cancel the password and then reset again
** Changed in: lightdm (Ubuntu) Status: Incomplete => Confirmed ** Changed in: oem-priority/trusty Status: New => Confirmed ** Changed in: oem-priority Status: New => Confirmed ** Description changed: OS: 14.04 trusty + + Tested with 16.10 + lightdm version is 1.19.5 + issue still exist + 1. Go to path "System Setting --> User Accounts--> Unlock" to unlock system setting. 2. Click "Password --> Action --> Log in without password -->Change to clear Log in password. 3. Reboot and log to desktop without password. 4. Then do the similar action "Set a password now" as the same way to set Log in password. 5. Reboot but still no password needed at Log in interface. ** Changed in: lightdm (Ubuntu) Importance: Undecided => High -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1630156 Title: No password needed to Log in after cancel the password and then reset again To manage notifications about this bug go to: https://bugs.launchpad.net/lightdm/+bug/1630156/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1630156] Re: No password needed to Log in after cancel the password and then reset again
Tested with 16.10 lightdm version is 1.19.5 issue still exist -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1630156 Title: No password needed to Log in after cancel the password and then reset again To manage notifications about this bug go to: https://bugs.launchpad.net/lightdm/+bug/1630156/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1630156] Re: No password needed to Log in after cancel the password and then reset again
lightdm version is 1.10.6 and tested with 16.04(lightdm version 1.18.2), issue still exist -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1630156 Title: No password needed to Log in after cancel the password and then reset again To manage notifications about this bug go to: https://bugs.launchpad.net/lightdm/+bug/1630156/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1630156] Re: No password needed to Log in after cancel the password and then reset again
What version of lightdm are you using? Is this happening in Yakkety? ** Changed in: lightdm (Ubuntu) Status: New => Incomplete -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1630156 Title: No password needed to Log in after cancel the password and then reset again To manage notifications about this bug go to: https://bugs.launchpad.net/lightdm/+bug/1630156/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1630156] Re: No password needed to Log in after cancel the password and then reset again
** Also affects: lightdm Importance: Undecided Status: New ** Also affects: oem-priority Importance: Undecided Status: New ** Also affects: oem-priority/precise Importance: Undecided Status: New ** Also affects: oem-priority/trusty Importance: Undecided Status: New ** No longer affects: oem-priority/precise ** Changed in: oem-priority Importance: Undecided => High ** Changed in: oem-priority/trusty Importance: Undecided => High ** Changed in: oem-priority Importance: High => Critical ** Changed in: oem-priority/trusty Importance: High => Critical -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1630156 Title: No password needed to Log in after cancel the password and then reset again To manage notifications about this bug go to: https://bugs.launchpad.net/lightdm/+bug/1630156/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
