New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

KDE screenlocker in dom0 does not let me type any password #2664

Open
Rudd-O opened this Issue Mar 3, 2017 · 2 comments

Comments

Projects
None yet
2 participants
@Rudd-O

Rudd-O commented Mar 3, 2017

Fresh R3.2.

After installing KDE as per #2663 :

The screen lock password field is greyed out and cannot be clicked, or receive input in any way. This makes it impossible to break into the system (no VTs getty anymore since R3.2 that I noticed).

Some hints around the Web mention something about PAM configuration.

This is the kscreensaver PAM.d file:

#%PAM-1.0
auth       include	system-auth
account    include	system-auth
password   include	system-auth
session    include	system-auth

This is the kde PAM.d file:

#%PAM-1.0
#auth [user_unknown=ignore success=ok ignore=ignore default=bad] pam_securetty.so
auth       substack     system-auth
auth       include      postlogin
account    required     pam_nologin.so
account    include      system-auth
password   include      system-auth
# pam_selinux.so close should be the first session rule
session    required     pam_selinux.so close
session    required     pam_loginuid.so
session    optional     pam_console.so
# pam_selinux.so open should only be followed by sessions to be executed in the user context
session    required     pam_selinux.so open
session    required     pam_namespace.so
session    optional     pam_keyinit.so force revoke
session    include      system-auth
session    include      postlogin
#-session   optional     pam_ck_connector.so

This is the xscreensaver PAM.d configuration:

#%PAM-1.0

# Fedora Core 5:
auth       include	system-auth

# SuSE 9.0: (along with "configure --with-passwd-helper" and "unix2_chkpwd")
# auth     required       pam_unix2.so	nullok

# Distant past:
# auth       required	/lib/security/pam_pwdb.so shadow nullok

# Account validation
account include system-auth

I will report on which one works. It is known that the kscreensaver one does not work.

@Rudd-O

This comment has been minimized.

Show comment
Hide comment
@Rudd-O

Rudd-O Mar 3, 2017

The xscreensaver one works.

Rudd-O commented Mar 3, 2017

The xscreensaver one works.

@Rudd-O

This comment has been minimized.

Show comment
Hide comment
@Rudd-O

Rudd-O Mar 3, 2017

Fix for the screensaver in #2663. Workaround, really.

Rudd-O commented Mar 3, 2017

Fix for the screensaver in #2663. Workaround, really.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment