Debian Bug report logs - #415732
fails to authenticate with second password pam auth module

Display info messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Jack Bates <ms419@freezone.co.uk>

To: Debian Bug Tracking System <submit@bugs.debian.org>

Subject: fails to authenticate with second password pam auth module

Date: Wed, 21 Mar 2007 08:10:59 -0700

Package: gksu
Version: 2.0.0-1
Severity: normal

I use two pam auth modules: pam_shishi and pam_unix. If I enter a
password and pam_shishi fails to authenticate, sudo prompts me for a
second password and tries to authenticate with pam_unix.

gnome-screensaver only prompts me for a password once, but it uses the
password to authenticate with both pam_shishi and pam_unix.

gksu fails when pam requests a second password. It doesn't prompt me for
a second password, nor does it use my first password. Consequently if I
have network problems and can't authenticate with pam_shishi, I can't
use gksu.

Thanks for maintaining this package! Jack

-- System Information:
Debian Release: 4.0
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.18-4-686
Locale: LANG=en_CA.UTF-8, LC_CTYPE=en_CA.UTF-8 (charmap=UTF-8)

Versions of packages gksu depends on:
ii  gnome-keyring               0.6.0-3      GNOME keyring services (daemon and
ii  libatk1.0-0                 1.12.4-3     The ATK accessibility toolkit
ii  libc6                       2.3.6.ds1-13 GNU C Library: Shared libraries
ii  libcairo2                   1.2.4-4      The Cairo 2D vector graphics libra
ii  libfontconfig1              2.4.2-1.2    generic font configuration library
ii  libgconf2-4                 2.16.1-1     GNOME configuration database syste
ii  libgksu2-0                  2.0.3-7      library providing su and sudo func
ii  libglib2.0-0                2.12.6-2     The GLib library of C routines
ii  libgnome-keyring0           0.6.0-3      GNOME keyring services library
ii  libgtk2.0-0                 2.8.20-7     The GTK+ graphical user interface 
ii  liborbit2                   1:2.14.4-1   libraries for ORBit2 - a CORBA ORB
ii  libpango1.0-0               1.14.8-5     Layout and rendering of internatio
ii  libstartup-notification0    0.9-1        library for program launch feedbac
ii  libx11-6                    2:1.0.3-6    X11 client-side library
ii  libxcursor1                 1.1.7-4      X cursor management library
ii  libxext6                    1:1.0.1-2    X11 miscellaneous extension librar
ii  libxfixes3                  1:4.0.1-5    X11 miscellaneous 'fixes' extensio
ii  libxi6                      1:1.0.1-4    X11 Input extension library
ii  libxinerama1                1:1.0.1-4.1  X11 Xinerama extension library
ii  libxrandr2                  2:1.1.0.2-5  X11 RandR extension library
ii  libxrender1                 1:0.9.1-3    X Rendering Extension client libra
ii  sudo                        1.6.8p12-4   Provide limited super user privile

gksu recommends no packages.

-- no debconf information

Message #10 received at 415732@bugs.debian.org (full text, mbox, reply):

From: Josselin Mouette <joss@debian.org>

To: Jack Bates <ms419@freezone.co.uk>, 415732@bugs.debian.org

Subject: Re: Bug#415732: fails to authenticate with second password pam auth module

Date: Wed, 21 Mar 2007 22:03:52 +0100

[Message part 1 (text/plain, inline)]

Le mercredi 21 mars 2007 à 08:10 -0700, Jack Bates a écrit :
> Package: gksu
> Version: 2.0.0-1
> Severity: normal
> 
> I use two pam auth modules: pam_shishi and pam_unix. If I enter a
> password and pam_shishi fails to authenticate, sudo prompts me for a
> second password and tries to authenticate with pam_unix.

It looks like your PAM configuration is incorrect. You should use the
use_first_pass option for pam_unix so that the password rejected by
pam_shishi is re-used.

Cheers,
-- 
 .''`.
: :' :      We are debian.org. Lower your prices, surrender your code.
`. `'       We will add your hardware and software distinctiveness to
  `-        our own. Resistance is futile.

[signature.asc (application/pgp-signature, inline)]

Message #15 received at 415732@bugs.debian.org (full text, mbox, reply):

From: Jack Bates <ms419@freezone.co.uk>

To: 415732@bugs.debian.org

Subject: Re: Bug#415732: fails to authenticate with second password pam auth module

Date: Wed, 21 Mar 2007 14:53:48 -0700

[Message part 1 (text/plain, inline)]

On Wed, 2007-21-03 at 22:03 +0100, Josselin Mouette wrote:
> Le mercredi 21 mars 2007 à 08:10 -0700, Jack Bates a écrit :
> > Package: gksu
> > Version: 2.0.0-1
> > Severity: normal
> > 
> > I use two pam auth modules: pam_shishi and pam_unix. If I enter a
> > password and pam_shishi fails to authenticate, sudo prompts me for a
> > second password and tries to authenticate with pam_unix.
> 
> It looks like your PAM configuration is incorrect. You should use the
> use_first_pass option for pam_unix so that the password rejected by
> pam_shishi is re-used.

Thanks for your fast response. use_first_pass prevents users whose
Kerberos password differes from their local password from logging in
when pam_shishi fails. Our system needs to support prompting the user
for a second password, but gksu does not appear to handle this second
password prompt.

Jack

[signature.asc (application/pgp-signature, inline)]

Message #22 received at 415732-done@bugs.debian.org (full text, mbox, reply):

From: Debian FTP Masters <ftpmaster@ftp-master.debian.org>

To: 326626-done@bugs.debian.org,391802-done@bugs.debian.org,415732-done@bugs.debian.org,419672-done@bugs.debian.org,444059-done@bugs.debian.org,444141-done@bugs.debian.org,451801-done@bugs.debian.org,454624-done@bugs.debian.org,520953-done@bugs.debian.org,525875-done@bugs.debian.org,536303-done@bugs.debian.org,564188-done@bugs.debian.org,600365-done@bugs.debian.org,601166-done@bugs.debian.org,641076-done@bugs.debian.org,705389-done@bugs.debian.org,867931-done@bugs.debian.org,885552-done@bugs.debian.org,

Cc: libgksu@packages.debian.org

Subject: Bug#892771: Removed package(s) from unstable

Date: Wed, 21 Mar 2018 17:20:33 +0000

Version: 2.0.13~pre1-9+rm

Dear submitter,

as the package libgksu has just been removed from the Debian archive
unstable we hereby close the associated bug reports.  We are sorry
that we couldn't deal with your issue properly.

For details on the removal, please see https://bugs.debian.org/892771

The version of this package that was in Debian prior to this removal
can still be found using http://snapshot.debian.org/.

This message was generated automatically; if you believe that there is
a problem with it please contact the archive administrators by mailing
ftpmaster@ftp-master.debian.org.

Debian distribution maintenance software
pp.
Scott Kitterman (the ftpmaster behind the curtain)

Send a report that this bug log contains spam.