Ubuntu
gdm package

user is able to login without password

Bug #212923 reported by Fernando Miguel
256
Affects Status Importance Assigned to Milestone
gdm (Ubuntu)
Invalid
Medium
Unassigned

Bug Description

maybe this is just a configuration issue, but still it is really bad.
On my laptop, any user can enter on GDM without entering a password.
even on the TTYs anyone can login as root without a password (I've set a pass to root with passwd)

I wasnt able to reproduce this on another hardy PC.

What configuration files should I submit to triage this bug?

Revision history for this message
Kees Cook (kees) wrote :

I would recommend examining your PAM configuration files in /etc/pam.d/, especially the common-* files. You may want to try reinstalling pam to see if it warns you about changed configuration files too:

  sudo apt-get --reinstall install libpam-runtime

The stock versions of these files are in /usr/share/pam/common-*

Changed in gdm:
status: New → Incomplete
Revision history for this message
Fernando Miguel (fernandomiguel) wrote :

yesterday I ran that command, and today I tried to login on GDM without a password.
And I as able to login...
something is really fishy with my install. I dont even have a runlevel...
Next saturday I'll reinstall it on our Install Fest.

Thanks for the support, Kees

Changed in gdm:
status: Incomplete → New
Revision history for this message
Sebastien Bacher (seb128) wrote :

do you still get the issue? that seems an issue on your installation and not really a gdm bug

Changed in gdm:
importance: Undecided → Medium
status: New → Incomplete
Revision history for this message
Fernando Miguel (fernandomiguel) wrote :

clean install fixed it.

thanks for the support, Sebastien.

Revision history for this message
Sebastien Bacher (seb128) wrote :

closing the bug since that seems to be rather an local issue than a bug and a reinstallation worked correctly

Changed in gdm:
status: Incomplete → Invalid
To post a comment you must log in.
This report contains Public Security information  
Everyone can see this security related information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.