Bug 135019 – xscreensaver refuses local password

• Product: Gentoo Linux
• Status: VERIFIED DUPLICATE

[Description Alexander Bodnarashik 2006-05-31 03:12:40 UTC]

xscreensaver refuses my local password when it prompts for password in it's dialog. same time it accepts ldap password. i've made small investigation, and discovered, that it just hasn't permissions to read /etc/shadow(i've made /etc/shadow world readable and xscreensaver accepted local password, but obviously it's not secure), as it's not suid'ed. Not sure if it's bug, could be misconfiguration.
----
installed version: x11-misc/xscreensaver-4.24 
----
boda@boda ~ $ ls -l `which xscreensaver`
-rwxr-xr-x 1 root root 223196 Май 24 14:00 /usr/bin/xscreensaver
----
boda ~ # grep -E -v "^#|^$" /etc/pam.d/xscreensaver
auth    include         system-auth
----
boda ~ # grep -E  "^auth" /etc/pam.d/system-auth
auth        required      pam_env.so
auth        sufficient    pam_ldap.so
auth        sufficient    pam_unix.so try_first_pass likeauth nullok
auth        required      pam_deny.so
----
from /var/log/messages:
May 31 10:22:07 boda xscreensaver: pam_ldap: error trying to bind as user "uid=boda,ou=People,ou=zt,o=wap3,c=ua" (Invalid credentials)
May 31 10:22:07 boda xscreensaver(pam_unix)[16810]: authentication failure; logname= uid=4106 euid=4106 tty=:0.0 ruser= rhost=  user=boda
May 31 10:22:08 boda xscreensaver(pam_unix)[16810]: authentication failure; logname= uid=4106 euid=4106 tty=:0.0 ruser= rhost=  user=root
May 31 10:22:10 boda xscreensaver[16810]: FAILED LOGIN 1 ON DISPLAY ":0.0", FOR "boda"
----
boda@boda ~ $ emerge --info
Portage 2.0.54-r2 (default-linux/x86/2006.0, gcc-3.4.6, glibc-2.3.6-r3, 2.6.16-gentoo-r7 i686)
=================================================================
System uname: 2.6.16-gentoo-r7 i686 Intel(R) Celeron(R) CPU 2.53GHz
Gentoo Base System version 1.6.14
dev-lang/python:     2.4.2
dev-python/pycrypto: [Not Present]
dev-util/ccache:     [Not Present]
dev-util/confcache:  [Not Present]
sys-apps/sandbox:    1.2.17
sys-devel/autoconf:  2.13, 2.59-r7
sys-devel/automake:  1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6-r1
sys-devel/binutils:  2.16.1-r2
sys-devel/libtool:   1.5.22
virtual/os-headers:  2.6.11-r2
ACCEPT_KEYWORDS="x86"
AUTOCLEAN="yes"
CBUILD="i686-pc-linux-gnu"
CFLAGS="-O3 -pipe -mtune=i686 -march=pentium4 -fomit-frame-pointer"
CHOST="i686-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/kde/3.4/env /usr/kde/3.4/share/config /usr/kde/3.4/shutdown /usr/kde/3.5/env /usr/kde/3.5/share/config /usr/kde/3.5/shutdown /usr/lib/X11/xkb /usr/lib/mozilla/defaults/pref /usr/share/config"
CONFIG_PROTECT_MASK="/etc/gconf /etc/terminfo /etc/env.d"
CXXFLAGS="-O3 -pipe -mtune=i686 -march=pentium4 -fomit-frame-pointer"
DISTDIR="/usr/portage/distfiles"
FEATURES="autoconfig distlocks sandbox sfperms strict"
GENTOO_MIRRORS="http://distfiles.gentoo.org http://distro.ibiblio.org/pub/linux/distributions/gentoo"
LANG="ru_RU.UTF-8"
LC_ALL=""
LINGUAS="ru"
MAKEOPTS="-j2"
PKGDIR="/usr/portage/packages"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
PORTDIR_OVERLAY="/usr/local/portage"
SYNC="rsync://rsync.gentoo.org/gentoo-portage"
USE="X a52 aac alsa apache2 apm asf audiofile automount avi berkdb bitmap-fonts bluetooth bonobo bzip2 cdr cgi cli crypt cups curl curlwrappers dba dga divx4linux dri dv dvb dvd dvdr dvdread eds emboss encode esd exif expat fam fastcgi fbcon ffmpeg flac foomaticdb fortran ftp gd gdbm gif glut gnome gpm gstreamer gtk gtk2 gtkhtml hal iconv icq idn imagemagick imap imlib ipv6 isdnlog jabber java javascript jpeg lame lcms ldap libg++ libwww lm_sensors mad mbox mikmod mime mmx mmxext mng motif mozilla mp3 mpeg mysql mysqli ncurses nls nptl nptlonly nsplugin ogg opengl openldap oss pam pcntl pcre pdflib perl php png posix pppd python quicktime readline recode reflection samba sdl session sharedmem slang soap sockets speex spell spl sse sse2 ssl tcpd theora tidy tiff truetype truetype-fonts type1-fonts udev unicode usb userlocales utf8 v4l v4l2 vcd vhosts vorbis win32codecs wma wxwindows x86 xine xinerama xml xml2 xmms xorg xosd xsl xv xvid zlib linguas_ru userland_GNU kernel_linux elibc_glibc"
Unset:  CTARGET, INSTALL_MASK, LDFLAGS, PORTAGE_RSYNC_EXTRA_OPTS, PORTAGE_RSYNC_OPTS

[Comment 1 Jakub Moc (RETIRED) 2006-05-31 03:17:52 UTC]

*** This bug has been marked as a duplicate of 135018 ***

[Comment 2 Jakub Moc (RETIRED) 2006-05-31 03:18:04 UTC]

.