Launchpad has imported 3 comments from the remote bug at https://bugs.freedesktop.org/show_bug.cgi?id=92886.
If you reply to an imported comment from within Launchpad, your comment will be sent to the remote bug automatically. Read more about Launchpad's inter-bugtracker facilities at https://help.launchpad.net/InterBugTracking. ------------------------------------------------------------------------ On 2015-11-10T09:42:00+00:00 Dariusz Gadomski wrote: There is an error observed when Ubuntu is configured to perform authentication via pam_vas (Vintela Authentication Services by Dell) in a disconnected mode (using cached authentication). Steps to reproduce: 1. Configure pam_vas client authenticating to a remote server. 2. Perform authentication to cache the credentials. 3. Disconnect from the network where the server is reachable (to force using cached information). 4. Perform an action requiring polkit authentication. Expected result: Authentication succeeds accompanied by the following message "You have logged in using cached account information. Some network services will be unavailable". Actual result: Authentication fails accompanied by the following message "You have logged in using cached account information. Some network services will be unavailable". Probable cause: The PolkitAgentSession part of polkit is designed to interpret only 1-line output, while interaction with pam_vas in the above scenario triggers helper to produce the following 2-line output: PAM_TEXT_INFO You have logged in using cached account information. Some network services will be unavailable. The 'will be unavailable.' part is interpreted as an unknown message and causes failed authorization. Reply at: https://bugs.launchpad.net/ubuntu/+source/policykit-1/+bug/1510824/comments/2 ------------------------------------------------------------------------ On 2015-11-10T09:55:13+00:00 Dariusz Gadomski wrote: Created attachment 119534 Tested patch fixing the issue Reply at: https://bugs.launchpad.net/ubuntu/+source/policykit-1/+bug/1510824/comments/3 ------------------------------------------------------------------------ On 2015-11-10T17:47:20+00:00 Miloslav Trmac wrote: Thanks for the patch. Yes, this is the correct thing to do (polkitagentsession.c:io_watch_have_data is always calling g_strcompress()). Having the same newline handling and escaping code in three places seems too ugly and unnecessary, though. Would you be willing to update the patch so that polkitagenthelper-pam.c uses the send_to_helper function throughout (modified to do the escaping as necessary), or at least to test such an updated patch? Reply at: https://bugs.launchpad.net/ubuntu/+source/policykit-1/+bug/1510824/comments/4 ** Changed in: policykit-1 Status: Unknown => Incomplete ** Changed in: policykit-1 Importance: Unknown => Medium -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1510824 Title: PolkitAgentSession incorrectly handles multiline output (as observed with pam_vas) To manage notifications about this bug go to: https://bugs.launchpad.net/policykit-1/+bug/1510824/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
