Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 354627 - x11-misc/slim gives notorious pam authentication failure
Summary: x11-misc/slim gives notorious pam authentication failure
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: High normal
Assignee: Jeremy Olexa (darkside) (RETIRED)
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2011-02-12 16:41 UTC by Michael M. Tung
Modified: 2011-02-12 20:45 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---


Attachments
emerge --info x11-apps/xdm (xdm_out,4.55 KB, text/plain)
2011-02-12 18:55 UTC, Michael M. Tung
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Michael M. Tung 2011-02-12 16:41:19 UTC
After upgrading X11 and related files slim wouldn't accept any valid user/password combination. It worked flawless before the X11 update: The /var/log/slim.log file indicated the error:

slim: pam_authentication(): Authentication failure

Then, after chaning /etc/pam.d/xdm back to

auth       required     pam_nologin.so
auth       include      system-auth
account    include      system-auth
password   include      system-auth
session    include      system-auth

it worked again. The latest /etc/pam.d/xdm entries

auth    include         system-local-login
account include         system-local-login
session include         system-local-login

don't work for me.

Another strange effect that the keyboard is detected correctly as 'es' on the console, but slim assumes 'us'. This is pretty bad because the password letters which one cannot see come out wrong.

Any suggestions for solving the PAM issue for all Gentoo users and resolve the keyboard problem? 

Reproducible: Always
Comment 1 Jeremy Olexa (darkside) (RETIRED) archtester gentoo-dev Security 2011-02-12 18:26:15 UTC
Where does this /etc/pam.d/xdm file come from? I don't have it on my system.

"equery belong /etc/pam.d/xdm" or "qfile /etc/pam.d/xdm"

Also, you should most always include your emerge --info on bug reports.
Comment 2 Michael M. Tung 2011-02-12 18:55:44 UTC
Created attachment 262271 [details]
emerge --info x11-apps/xdm
Comment 3 Michael M. Tung 2011-02-12 18:56:27 UTC
(In reply to comment #1)
> Where does this /etc/pam.d/xdm file come from? I don't have it on my system.
> 
> "equery belong /etc/pam.d/xdm" or "qfile /etc/pam.d/xdm"
> 
> Also, you should most always include your emerge --info on bug reports.
> 

Hi Jeremy, thanks for your speedy reply on a weekend! Actually, "equery b /etc/pam.d/xdm" gives x11-apps/xdm-1.1.10-r1. Strange that it doesn't show up on your system.

In this case I didn't include the emerge --info data because it appears to be a configuration problem, not a compilation issue. In fact, I did not compile xdm when the problem occurred. It was the entire batch of updates on X11 which came out today. Didn't want to bother with the output of all of these "emerge --info" (around 15 updates). --- I was thinking that perhaps the new x11-apps/xinit could also have to todo something with it...

The keyboard problem is also strange. Haven't changed the configuration and now the keyboard is not recognized as Spanish (although Option "XkbLayout" "es"
is set correctly in xorg.conf).

Let me know which "emerge --info" could be useful to you, apart from the xdm output which I attach. As I mentioned before, xdm was not recompiled when the problem showed up.

Best, Mike
Comment 4 Jeremy Olexa (darkside) (RETIRED) archtester gentoo-dev Security 2011-02-12 19:26:57 UTC
Oh, I don't use x11-apps/xdm - so that is why I don't have it on my system. I just meant "emerge --info" in general, but that is included in the output from what you have attached. So, what DISPLAYMANAGER do you use? (normally set in /etc/conf.d/xdm)
Comment 5 Michael M. Tung 2011-02-12 19:31:28 UTC
(In reply to comment #4)
> Oh, I don't use x11-apps/xdm - so that is why I don't have it on my system. I
> just meant "emerge --info" in general, but that is included in the output from
> what you have attached. So, what DISPLAYMANAGER do you use? (normally set in
> /etc/conf.d/xdm)
> 

I am using fluxbox, but other users on the system use gnome. For all the same problem with the login, before changing /etc/pam.d/xdm back the old settings.
Comment 6 Michael M. Tung 2011-02-12 20:26:28 UTC
(In reply to comment #5)
> (In reply to comment #4)
> > Oh, I don't use x11-apps/xdm - so that is why I don't have it on my system. I
> > just meant "emerge --info" in general, but that is included in the output from
> > what you have attached. So, what DISPLAYMANAGER do you use? (normally set in
> > /etc/conf.d/xdm)
> > 
> 
> I am using fluxbox, but other users on the system use gnome. For all the same
> problem with the login, before changing /etc/pam.d/xdm back the old settings.
> 

Hi Jeremy, I just found several things out what happened. Doing the X11 update this afternoon, emerge brutally had overwritten without interaction my udev definitions in  /usr/share/X11/xorg.conf.d/, especially my keyboard setting which without manual help is not automatically detected correctly. This mistake was not immediately obvious. The keyboard is redefined again in the users' xinitrc. So it appeared to be a problem of slim/xdm, because the user has all correctly set up.

I believe that Gentoo should also include the settings of /usr/share/X11/xorg.conf.d/ in the etc-update mechanism, so that no important configs are overwritten by default.

I close this "bug" as resolved. In any case many thanks for your speedy support.
Best, Mike
Comment 7 Jeremy Olexa (darkside) (RETIRED) archtester gentoo-dev Security 2011-02-12 20:33:16 UTC
(In reply to comment #5)
> (In reply to comment #4)
> > Oh, I don't use x11-apps/xdm - so that is why I don't have it on my system. I
> > just meant "emerge --info" in general, but that is included in the output from
> > what you have attached. So, what DISPLAYMANAGER do you use? (normally set in
> > /etc/conf.d/xdm)
> > 
> 
> I am using fluxbox, but other users on the system use gnome. For all the same
> problem with the login, before changing /etc/pam.d/xdm back the old settings.
> 

I don't care about fluxbox or gnome. DISPLAYMANAGER is xdm, slim, kdm, etc.


(In reply to comment #6)
> I believe that Gentoo should also include the settings of
> /usr/share/X11/xorg.conf.d/ in the etc-update mechanism, so that no important
> configs are overwritten by default.

Actually, you should be putting USER settings (eg, the ones you want and edit) in /etc/X11/xorg.conf.d/ You can find hints to that in: http://www.gentoo.org/proj/en/desktop/x/x11/xorg-server-1.8-upgrade-guide.xml (I know that guide is for a different version) but that is going beyond my expertise (I don't use any xorg.conf file at all)

Anyway, glad you figured it out. It doesn't sound like a x11-misc/slim problem at all, though.
Comment 8 Michael M. Tung 2011-02-12 20:41:00 UTC
> Actually, you should be putting USER settings (eg, the ones you want and edit)
> in /etc/X11/xorg.conf.d/ You can find hints to that in:
> http://www.gentoo.org/proj/en/desktop/x/x11/xorg-server-1.8-upgrade-guide.xml
> (I know that guide is for a different version) but that is going beyond my
> expertise (I don't use any xorg.conf file at all)
> 
> Anyway, glad you figured it out. It doesn't sound like a x11-misc/slim problem
> at all, though.
> 

You're right, it's not a slim/xdm problem after all. --- I believe the manual xorg-server-1.8-upgrade-guide.xml isn't correct anymore with regard to the xorg.conf.d directory; on my system it is located at /usr/share/X11/xorg.conf.d. I suspect that this has moved after the last major version change. Cheers, Mike
Comment 9 Jeremy Olexa (darkside) (RETIRED) archtester gentoo-dev Security 2011-02-12 20:45:33 UTC
Yea, that's where xorg-server installs the default files. If the user needs to modify them then it should be placed in /etc (as I understand it) - You may want to open a new bug for the x11 team to improve the documentation.