It does not happen with kdebase-pam version 7. Maybe it'a feature, but I doubt that. Old /etc/pam.d/kde contents: #%PAM-1.0 auth required pam_nologin.so auth include system-auth account include system-auth password include system-auth session include system-auth New contents: #%PAM-1.0 auth required pam_nologin.so auth include system-local-login account include system-local-login password include system-local-login session include system-local-login Reproducible: Always Steps to Reproduce: 1. Update kdebase-pam to version 9 2. Check that /etc/pam.d/kde is updated 3. Login with KDM Portage 2.2.0_alpha174 (default/linux/amd64/13.0/desktop/kde, gcc-4.7.2, glibc-2.17, 3.9.0-gentoomelf x86_64) ================================================================= System uname: Linux-3.9.0-gentoomelf-x86_64-Intel-R-_Core-TM-_i5-2400_CPU_@_3.10GHz-with-gentoo-2.2 KiB Mem: 16414128 total, 13833948 free KiB Swap: 5242876 total, 5242876 free Timestamp of tree: Sat, 04 May 2013 12:45:01 +0000 ld GNU ld (GNU Binutils) 2.23.1 app-shells/bash: 4.2_p45 dev-lang/python: 2.7.4, 3.2.4 dev-util/cmake: 2.8.10.2-r2 dev-util/pkgconfig: 0.28 sys-apps/baselayout: 2.2 sys-apps/openrc: 0.11.8 sys-apps/sandbox: 2.6-r1 sys-devel/autoconf: 2.13, 2.69 sys-devel/automake: 1.11.6, 1.12.6, 1.13.1 sys-devel/binutils: 2.23.1 sys-devel/gcc: 4.7.2-r1 sys-devel/gcc-config: 1.8 sys-devel/libtool: 2.4.2 sys-devel/make: 3.82-r4 sys-kernel/linux-headers: 3.8 (virtual/os-headers) sys-libs/glibc: 2.17 Repositories: gentoo systemd-love custom Installed sets: @fonts, @kde, @vim ACCEPT_KEYWORDS="amd64 ~amd64" ACCEPT_LICENSE="@FREE NVIDIA-r1 skype-4.0.0.7-copyright AdobeFlash-11.x MPEG-4 myspell-ru_RU-ALexanderLebedev grass-ipafonts BitstreamCyberbit freedist free-noncomm MSttfEULA vim.org CC-BY-NC-ND-3.0" CBUILD="x86_64-pc-linux-gnu" CFLAGS="-O2 -pipe -march=native -mtune=native" CHOST="x86_64-pc-linux-gnu" CONFIG_PROTECT="/etc /usr/share/config /usr/share/gnupg/qualified.txt /usr/share/ibus/component/simple.xml /usr/share/polkit-1/actions" CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/env.d /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/revdep-rebuild /etc/sandbox.d /etc/terminfo" CXXFLAGS="-O2 -pipe -march=native -mtune=native" DISTDIR="/usr/portage/distfiles" FCFLAGS="-O2 -pipe" FEATURES="assume-digests binpkg-logs config-protect-if-modified distlocks ebuild-locks fixlafiles merge-sync news parallel-fetch preserve-libs protect-owned sandbox sfperms strict unknown-features-warn unmerge-logs unmerge-orphans userfetch" FFLAGS="-O2 -pipe" GENTOO_MIRRORS="http://mirror.yandex.ru/gentoo-distfiles/ http://trumpetti.atm.tut.fi/gentoo/" LANG="ru_RU.utf8" LDFLAGS="-Wl,-O1 -Wl,--as-needed" MAKEOPTS="-j5" PKGDIR="/usr/portage/packages" PORTAGE_CONFIGROOT="/" PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --stats --human-readable --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages" PORTAGE_TMPDIR="/var/tmp" PORTDIR="/usr/portage" PORTDIR_OVERLAY="/var/lib/layman/systemd-love /usr/local/portage" SYNC="rsync://mirror.yandex.ru/gentoo-portage/" USE="X a52 aac acl acpi alsa amd64 anthy bluetooth branding bzip2 cairo cdda cdr cjk cli cracklib crypt cups cxx dbus declarative directfb djvu dri dts dvd dvdr emboss encode exif fam fbcon ffmpeg firefox flac fortran gdbm gif gpm gstreamer gtk iconv icu idn ipv6 jpeg kde kipi lame lcms libcaca libnotify lm_sensors mad mmx mng modules mp3 mp4 mpeg mudflap multilib ncurses nls nptl ogg opengl openmp pam pango pcre pdf perl phonon plasma png policykit ppds python qt3support qt4 raw readline samba scanner sdl semantic-desktop session spell sse sse2 ssl startup-notification svg systemd tcpd tiff truetype udev udisks unicode upower usb vdpau vorbis wxwidgets x264 xcb xcomposite xinerama xml xscreensaver xv xvid zlib zsh-completion" ABI_X86="64" ALSA_CARDS="ali5451 als4000 atiixp atiixp-modem bt87x ca0106 cmipci emu10k1x ens1370 ens1371 es1938 es1968 fm801 hda-intel intel8x0 intel8x0m maestro3 trident usb-audio via82xx via82xx-modem ymfpci" ALSA_PCM_PLUGINS="adpcm alaw asym copy dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mmap_emul mulaw multi null plug rate route share shm softvol" APACHE2_MODULES="authn_core authz_core socache_shmcb unixd actions alias auth_basic authn_alias authn_anon authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache cgi cgid dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" CALLIGRA_FEATURES="kexi words flow plan sheets stage tables krita karbon braindump author" CAMERAS="ptp2" COLLECTD_PLUGINS="df interface irq load memory rrdtool swap syslog" ELIBC="glibc" GPSD_PROTOCOLS="ashtech aivdm earthmate evermore fv18 garmin garmintxt gpsclock itrax mtk3301 nmea ntrip navcom oceanserver oldstyle oncore rtcm104v2 rtcm104v3 sirf superstar2 timing tsip tripmate tnt ubx" GRUB_PLATFORMS="efi-64" INPUT_DEVICES="evdev" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LIBREOFFICE_EXTENSIONS="presenter-console presenter-minimizer" LINGUAS="en en_GB ru ja" OFFICE_IMPLEMENTATION="libreoffice" PHP_TARGETS="php5-3" PYTHON_SINGLE_TARGET="python2_7" PYTHON_TARGETS="python2_7 python3_2" RUBY_TARGETS="ruby18 ruby19" SANE_BACKENDS="genesys" USERLAND="GNU" VIDEO_CARDS="nvidia nouveau" XTABLES_ADDONS="quota2 psd pknock lscan length2 ipv4options ipset ipp2p iface geoip fuzzy condition tee tarpit sysrq steal rawnat logmark ipmark dhcpmac delude chaos account" Unset: CPPFLAGS, CTARGET, EMERGE_DEFAULT_OPTS, INSTALL_MASK, LC_ALL, PORTAGE_BUNZIP2_COMMAND, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS, USE_PYTHON
I will post related files. system-local-login: auth include system-login account include system-login password include system-login session include system-login system-login: auth required pam_tally2.so onerr=succeed auth required pam_shells.so auth required pam_nologin.so auth include system-auth account required pam_access.so account required pam_nologin.so account include system-auth account required pam_tally2.so onerr=succeed password include system-auth session optional pam_loginuid.so session required pam_env.so session optional pam_lastlog.so session include system-auth -session optional pam_systemd.so session optional pam_motd.so motd=/etc/motd session optional pam_mail.so system-auth: auth required pam_env.so auth required pam_unix.so try_first_pass likeauth nullok auth optional pam_permit.so account required pam_unix.so account optional pam_permit.so password required pam_cracklib.so difok=2 minlen=8 dcredit=2 ocredit=2 retry=3 password required pam_unix.so try_first_pass use_authtok nullok sha512 shadow password optional pam_permit.so session required pam_limits.so session required pam_env.so session required pam_unix.so session optional pam_permit.so
rebuild pambase with USE="minimal" or edit /etc/pam.d/system-login > session optional pam_lastlog.so silent https://bugs.gentoo.org/show_bug.cgi?id=422495
I have the same behaviour with kde-base/kdebase-pam-9 When I use the line session optional pam_lastlog.so silent there is still one info-Popup which stops the kde login until clicking ok. So I downgraded to kde-base/kdebase-pam-7. I am really wondering, who made these messages which blocks the loading of the desktop. Please load the desktop and show the messages in a sepearate area (window, plasma, what else). Blocking the loading of the desktop is a "hit an the users face" in my opinion.
I can confirm, the same annoying dialog box pops up as described in bug #422495. Please fix ASAP.
This is very annoying. Can we please get this fixed in a reasonable timeframe?
Please test >=sys-auth/pambase-20120417-r2, if this fixes the problem.
Tested, it's ok now.
It indeed fixes kdm login. But now, no more last-login notice when login with ssh. Sounds like a regression to me.
(In reply to Guillaume Castagnino from comment #8) > It indeed fixes kdm login. But now, no more last-login notice when login > with ssh. Sounds like a regression to me. ago@devil ~ $ ssh root@192.168.1.5 Last login: Sun Jun 16 23:21:54 2013 from 192.168.1.100 arcadia ~ # This is fine here, check your sshd_config
OK, I get it: the last login when logging in with ssh was previously printed by PAM. Now it's no more due to this change in pambase-20130414-r2. To have the lastlog printed, I have to either switch "PrintLastLog" on in sshd_config OR add "session optional pam_lastlog.so" to /etc/pam.d/sshd (not both, unless I want to see the lastlog message twice). But if I'm not mistaken, none of those 2 options are enabled by default when having USE=pam. But it seems it's fine when having USE=-pam. OK, so I think I will open a new bug on openssh asking to change /etc/pam.d/sshd just like /etc/pam.d/login was in the last pambase... :)
(In reply to Johannes Huber from comment #6) > Please test >=sys-auth/pambase-20120417-r2, if this fixes the problem. Fixes the “Last login” message, but the “You have … mail” message remains. Please also remove pam_mail.so and consistently add it in those places where you'd also use the non-silent pam_lastlog.so.
(In reply to Martin von Gagern from comment #11) > (In reply to Johannes Huber from comment #6) > > Please test >=sys-auth/pambase-20120417-r2, if this fixes the problem. > > Fixes the “Last login” message, but the “You have … mail” message remains. > Please also remove pam_mail.so and consistently add it in those places where > you'd also use the non-silent pam_lastlog.so. Please report a new bug about the mail issue against sys-auth/pambase.