Installing winbind causes sudo to behave weird on SIGINT

Bug #564842 reported by Hernando Torque
24
This bug affects 5 people
Affects Status Importance Assigned to Milestone
samba (Ubuntu)
Confirmed
Low
Unassigned

Bug Description

Binary package hint: samba

With winbind installed I cannot abort a sudo password request (gnome-terminal and VT) with a single Ctrl-C key combo. Instead the password prompt is shown again. Pushing either Ctrl-C a second time or the enter key brings me back to the prompt:

test@box:~$ sudo echo "foo"
[sudo] password for test: // Ctrl-C
[sudo] password for test: // Ctrl-C or enter key
test@box:~$

For clarification: the second password request doesn't seem to be a retry - no matter what I type, as soon as I hit the enter key I'm back at the prompt.

I've found out that this behavior is caused by the changes made to /etc/pam.d/common-auth:

*) common-auth without windbind:

auth [success=1 default=ignore] pam_unix.so nullok_secure
auth requisite pam_deny.so
auth required pam_permit.so

*) common-auth with winbind installed:

auth [success=2 default=ignore] pam_unix.so nullok_secure
auth [success=1 default=ignore] pam_winbind.so krb5_auth krb5_ccache_type=FILE cached_login try_first_pass
auth requisite pam_deny.so
auth required pam_permit.so

ProblemType: Bug
DistroRelease: Ubuntu 10.04
Package: winbind 2:3.4.7~dfsg-1ubuntu3
ProcVersionSignature: Ubuntu 2.6.32-21.31-generic 2.6.32.11+drm33.2
Uname: Linux 2.6.32-21-generic i686
NonfreeKernelModules: nvidia
Architecture: i386
Date: Fri Apr 16 18:50:28 2010
ProcEnviron:
 PATH=(custom, user)
 LANG=en_US.utf8
 SHELL=/bin/bash
RelatedPackageVersions:
 nautilus 1:2.30.0-0ubuntu4
 gvfs 1.6.0+git20100414-0ubuntu1
SambaClientRegression: Yes
SourcePackage: samba

Revision history for this message
Hernando Torque (htorque) wrote :
description: updated
Revision history for this message
Chuck Short (zulcss) wrote :

Thank you for taking the time to report this bug and helping to make Ubuntu better. Unfortunately we can't fix it without more information.

Please include the information requested at https://wiki.ubuntu.com/DebuggingSamba#samba-client.

Changed in samba (Ubuntu):
importance: Undecided → Low
status: New → Incomplete
Revision history for this message
Hernando Torque (htorque) wrote :

Apport asked me all this questions, so the information is already present (see end of bug description and SambaInstalledVersions.txt). Please note that there is no remote server involved - it's all about a side-effect from installing winbind (actually I'm one of those unsuspecting users mentioned in point 5 of the introduction in your wiki link ;-)).

Revision history for this message
Chuck Short (zulcss) wrote :

Can you please attach your /var/log/samba/log.winbindd?

Thanks
chuck

Revision history for this message
Hernando Torque (htorque) wrote :
Thierry Carrez (ttx)
Changed in samba (Ubuntu):
status: Incomplete → New
Revision history for this message
Thierry Carrez (ttx) wrote :

I suspect it's a side-effect of using the PAM stack here.

Changed in samba (Ubuntu):
status: New → Confirmed
Revision history for this message
trumpeteersman (trumpeteersman) wrote :

I have the same issue with sudo not obeying ctrl+c.
However, I don't think that winbind is the reason why. I use a fingerprint reader so I had to add my own auth line.
Here is my /etc/pam.d/common-auth:

auth sufficient pam_thinkfinger.so
auth [success=1 default=ignore] pam_unix.so try_first_pass nullok_secure
auth requisite pam_deny.so
auth required pam_permit.so

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.