Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss
Bug#1051659: gdm3: GDM does not detect users correctly
45 views
Skip to first unread message
terroreek
Sep 10, 2023, 10:00:05 PM9/10/23
to
Package: gdm3
Version: 45~beta-1
Severity: normal
X-Debbugs-Cc: terro...@gmail.com
Dear Maintainer,
*** Reporter, please consider answering these questions, where appropriate ***
* What led up to the situation? dist-upgrade
* What exactly did you do (or not do) that was effective (or
ineffective)? workaround was to configure auto login
* What was the outcome of this action? was able to login
* What outcome did you expect instead? without autologin, I am unable to login. GDM does not detect my user and I can not manually enter in my username.
*** End of the template - remove these template lines ***
-- System Information:
Debian Release: trixie/sid
APT prefers unstable
APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 6.5.2-1-siduction-amd64 (SMP w/48 CPU threads; PREEMPT)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE
Locale: LANG=en_CA.utf8, LC_CTYPE=en_CA.utf8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages gdm3 depends on:
ii accountsservice 23.13.9-4
ii adduser 3.137
ii dbus [default-dbus-system-bus] 1.14.10-1
ii dbus-bin 1.14.10-1
ii dbus-daemon 1.14.10-1
ii dconf-cli 0.40.0-4
ii dconf-gsettings-backend 0.40.0-4
ii debconf [debconf-2.0] 1.5.82
ii gir1.2-gdm-1.0 45~beta-1
ii gnome-session [x-session-manager] 44.0-4
ii gnome-session-bin 44.0-4
ii gnome-session-common 44.0-4
ii gnome-settings-daemon 45~rc-1
ii gnome-shell 44.4-1
ii gnome-terminal [x-terminal-emulator] 3.49.99-1
ii gsettings-desktop-schemas 45~rc-1
ii libaccountsservice0 23.13.9-4
ii libaudit1 1:3.1.1-1
ii libc6 2.37-8
ii libcanberra-gtk3-0 0.30-10
ii libcanberra0 0.30-10
ii libgdk-pixbuf-2.0-0 2.42.10+dfsg-1+b1
ii libgdm1 45~beta-1
ii libglib2.0-0 2.78.0-1
ii libglib2.0-bin 2.78.0-1
ii libgtk-3-0 3.24.38-4
ii libgudev-1.0-0 238-2
ii libkeyutils1 1.6.3-2
ii libpam-modules 1.5.2-7
ii libpam-runtime 1.5.2-7
ii libpam-systemd [logind] 254.1-3
ii libpam0g 1.5.2-7
ii librsvg2-common 2.54.7+dfsg-2
ii libselinux1 3.5-1
ii libsystemd0 254.1-3
ii libx11-6 2:1.8.6-1
ii libxau6 1:1.0.9-1
ii libxcb1 1.15-1
ii libxdmcp6 1:1.1.2-3
ii mutter [x-window-manager] 44.4-2
ii polkitd 123-1
ii procps 2:4.0.3-1
ii systemd-sysv 254.1-3
ii tilix [x-terminal-emulator] 1.9.5-2
ii ucf 3.0043+nmu1
ii x11-common 1:7.7+23
ii x11-xserver-utils 7.7+9+b1
ii xterm [x-terminal-emulator] 384-1
Versions of packages gdm3 recommends:
ii at-spi2-core 2.49.91-2
ii desktop-base 12.0.6+nmu1
ii gnome-session [x-session-manager] 44.0-4
ii x11-xkb-utils 7.7+7
ii xserver-xephyr 2:21.1.8-1
ii xserver-xorg 1:7.7+23
ii zenity 3.44.2-1
Versions of packages gdm3 suggests:
pn libpam-fprintd <none>
ii libpam-gnome-keyring 42.1-1+b2
pn libpam-pkcs11 <none>
pn libpam-sss <none>
ii orca 44.1-2
-- Configuration Files:
/etc/gdm3/PostSession/Default changed:
systemctl --system start synergy.service
exit 0
/etc/gdm3/PreSession/Default changed:
PATH="/usr/bin:$PATH"
systemctl --system stop synergy.service
/etc/gdm3/daemon.conf changed:
[daemon]
WaylandEnable=false
AutomaticLoginEnable = true
AutomaticLogin = terroreek
[security]
[xdmcp]
[chooser]
[debug]
Enable=true
-- debconf information:
gdm3/daemon_name: /usr/sbin/gdm3
* shared/default-x-display-manager: gdm3
Version: 45~beta-1
Severity: normal
X-Debbugs-Cc: terro...@gmail.com
Dear Maintainer,
*** Reporter, please consider answering these questions, where appropriate ***
* What led up to the situation? dist-upgrade
* What exactly did you do (or not do) that was effective (or
ineffective)? workaround was to configure auto login
* What was the outcome of this action? was able to login
* What outcome did you expect instead? without autologin, I am unable to login. GDM does not detect my user and I can not manually enter in my username.
*** End of the template - remove these template lines ***
-- System Information:
Debian Release: trixie/sid
APT prefers unstable
APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 6.5.2-1-siduction-amd64 (SMP w/48 CPU threads; PREEMPT)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE
Locale: LANG=en_CA.utf8, LC_CTYPE=en_CA.utf8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages gdm3 depends on:
ii accountsservice 23.13.9-4
ii adduser 3.137
ii dbus [default-dbus-system-bus] 1.14.10-1
ii dbus-bin 1.14.10-1
ii dbus-daemon 1.14.10-1
ii dconf-cli 0.40.0-4
ii dconf-gsettings-backend 0.40.0-4
ii debconf [debconf-2.0] 1.5.82
ii gir1.2-gdm-1.0 45~beta-1
ii gnome-session [x-session-manager] 44.0-4
ii gnome-session-bin 44.0-4
ii gnome-session-common 44.0-4
ii gnome-settings-daemon 45~rc-1
ii gnome-shell 44.4-1
ii gnome-terminal [x-terminal-emulator] 3.49.99-1
ii gsettings-desktop-schemas 45~rc-1
ii libaccountsservice0 23.13.9-4
ii libaudit1 1:3.1.1-1
ii libc6 2.37-8
ii libcanberra-gtk3-0 0.30-10
ii libcanberra0 0.30-10
ii libgdk-pixbuf-2.0-0 2.42.10+dfsg-1+b1
ii libgdm1 45~beta-1
ii libglib2.0-0 2.78.0-1
ii libglib2.0-bin 2.78.0-1
ii libgtk-3-0 3.24.38-4
ii libgudev-1.0-0 238-2
ii libkeyutils1 1.6.3-2
ii libpam-modules 1.5.2-7
ii libpam-runtime 1.5.2-7
ii libpam-systemd [logind] 254.1-3
ii libpam0g 1.5.2-7
ii librsvg2-common 2.54.7+dfsg-2
ii libselinux1 3.5-1
ii libsystemd0 254.1-3
ii libx11-6 2:1.8.6-1
ii libxau6 1:1.0.9-1
ii libxcb1 1.15-1
ii libxdmcp6 1:1.1.2-3
ii mutter [x-window-manager] 44.4-2
ii polkitd 123-1
ii procps 2:4.0.3-1
ii systemd-sysv 254.1-3
ii tilix [x-terminal-emulator] 1.9.5-2
ii ucf 3.0043+nmu1
ii x11-common 1:7.7+23
ii x11-xserver-utils 7.7+9+b1
ii xterm [x-terminal-emulator] 384-1
Versions of packages gdm3 recommends:
ii at-spi2-core 2.49.91-2
ii desktop-base 12.0.6+nmu1
ii gnome-session [x-session-manager] 44.0-4
ii x11-xkb-utils 7.7+7
ii xserver-xephyr 2:21.1.8-1
ii xserver-xorg 1:7.7+23
ii zenity 3.44.2-1
Versions of packages gdm3 suggests:
pn libpam-fprintd <none>
ii libpam-gnome-keyring 42.1-1+b2
pn libpam-pkcs11 <none>
pn libpam-sss <none>
ii orca 44.1-2
-- Configuration Files:
/etc/gdm3/PostSession/Default changed:
systemctl --system start synergy.service
exit 0
/etc/gdm3/PreSession/Default changed:
PATH="/usr/bin:$PATH"
systemctl --system stop synergy.service
/etc/gdm3/daemon.conf changed:
[daemon]
WaylandEnable=false
AutomaticLoginEnable = true
AutomaticLogin = terroreek
[security]
[xdmcp]
[chooser]
[debug]
Enable=true
-- debconf information:
gdm3/daemon_name: /usr/sbin/gdm3
* shared/default-x-display-manager: gdm3
terroreek
Sep 16, 2023, 9:40:05 PM9/16/23
to
The issue seems to be having my Yubikey plugged in when GDM starts its looking for pam_sss.so. If the pam module is missing one cannot login interactively. I will try installing libpam-sss, to see if that revolves the issue. However it can be fixed by removing my yubikey and plug it in after logging into gdm.
Simon McVittie
Sep 17, 2023, 8:10:05 AM9/17/23
to
Control: retitle -1 gdm3 45 does not detect users correctly with Yubikey connected
Control: severity -1 important
This is probably the same bug as #1051785, which is a regression in
gdm3 version 45. If I understand correctly, this version integrated some
changes that were previously in Ubuntu, aiming to improve the ability to
use smartcards for authentication with gdm; but those changes go too far,
and break the ability to do non-smartcard authentication if related
PAM modules are not installed.
gdm should only do this if it can work: if the relevant PAM module
(pam_sss.so) is installed, and if the user/sysadmin has also configured
smartcard-based identities so that they can log in like this.
If you run as root
update-alternatives --set gdm-smartcard /etc/pam.d/gdm-smartcard-sssd-or-password
does that restore previous functionality?
Marco: I think we should set the alternatives priority of
gdm-smartcard-sssd-or-password higher than gdm-smartcard-sssd-exclusive
in debian/gdm3.alternatives, unless there is a reason I'm not seeing
why that isn't viable.
smcv
Control: severity -1 important
gdm3 version 45. If I understand correctly, this version integrated some
changes that were previously in Ubuntu, aiming to improve the ability to
use smartcards for authentication with gdm; but those changes go too far,
and break the ability to do non-smartcard authentication if related
PAM modules are not installed.
gdm should only do this if it can work: if the relevant PAM module
(pam_sss.so) is installed, and if the user/sysadmin has also configured
smartcard-based identities so that they can log in like this.
If you run as root
update-alternatives --set gdm-smartcard /etc/pam.d/gdm-smartcard-sssd-or-password
does that restore previous functionality?
Marco: I think we should set the alternatives priority of
gdm-smartcard-sssd-or-password higher than gdm-smartcard-sssd-exclusive
in debian/gdm3.alternatives, unless there is a reason I'm not seeing
why that isn't viable.
smcv
Marco Marzetti
Sep 18, 2023, 9:30:05 AM9/18/23
to
Hello,
--
I hit this issue today after upgrading to gdm 45~beta-1 . Switching to "/etc/pam.d/gdm-smartcard-sssd-or-password" works, but breaks "face chooser" on the GDM login screen.
Apparently the same happens also on Ubuntu. Please see: https://bugs.launchpad.net/ubuntu/+source/gdm3/+bug/1933027/comments/13 .
It would be great if either one could disable smart-card integration via update-alternatives (as suggested here: https://bugs.launchpad.net/ubuntu/+source/gdm3/+bug/1933027/comments/12) or if "gdm-smartcard-sssd-or-password" could provide the same login experience as of the previous behavior.
Thank you
Regards
Marco
0 new messages