Ubuntu
unity package

Can't unlock screen with last day password (before expired)

Bug #1460649 reported by Aleksey Vazhnov
12
This bug affects 2 people
Affects Status Importance Assigned to Milestone
unity (Ubuntu)
Fix Released
High
Andrea Azzarone
Xenial
Fix Released
Undecided
Unassigned

Bug Description

[Impact]

When I login with last day password, all ok. But when I locked screen, I can't unlock it, receive error «Invalid password, please try again».
I think, this bug more globally — «unity-panel-service --lockscreen-mode» does not have function for changing user password.

[Test case]
How to reproduce:

You need working LDAP-server and Ubuntu with LDAP client. My client, Ubuntu 14.04:

cat <<EOF |
ldap-auth-config ldap-auth-config/dblogin boolean false
ldap-auth-config ldap-auth-config/dbrootlogin boolean false
ldap-auth-config ldap-auth-config/ldapns/ldap-server string ldap://ldap/
ldap-auth-config ldap-auth-config/ldapns/ldap_version select 3
ldap-auth-config ldap-auth-config/move-to-debconf boolean true
ldap-auth-config ldap-auth-config/ldapns/base-dn string dc=example,dc=com
nslcd nslcd/ldap-base string dc=example,dc=com
nslcd nslcd/ldap-uris string ldap://ldap/
libnss-ldapd libnss-ldapd/nsswitch multiselect group, passwd, shadow
EOF
debconf_answers_ldap.dat

sudo debconf-set-selections debconf_answers_ldap.dat
sudo apt-get install libnss-ldapd libpam-ldap nss-updatedb libnss-db libpam-ccreds nscd libpam-cracklib

And create file /usr/share/pam-configs/mkhomedir:

Name: activate mkhomedir
Default: yes
Priority: 900
Session-Type: Additional
Session:
 required pam_mkhomedir.so umask=0022 skel=/etc/skel

Then run:
sudo pam-auth-update

Count todays number:
echo $(($(date --utc --date "$1" +%s)/86400))
For example, 16587.
In LDAP, add user account with attribute shadowMax=10 and shadowLastChange=16577.
Try to login in Ubuntu. All ok. No errors, no messages.
Now lock the screen (Ctrl+Alt+L).
Try to unlock screen — you can't. You see error «Invalid password, please try again».

Workaround:
Login to guest account and change user to myself.

[Regression potential]

Lock might fail

See original description

Related branches

lp://qastaging/~azzar1/unity/option-lockscreen-account-checking
Marco Trevisan (Treviño): Approve
PS Jenkins bot: Pending (continuous-integration) requested
Diff: 100 lines (+29/-5)
4 files modified
com.canonical.Unity.gschema.xml (+7/-0)
lockscreen/UserAuthenticatorPam.cpp (+14/-5)
unity-shared/UnitySettings.cpp (+7/-0)
unity-shared/UnitySettings.h (+1/-0)
lp://qastaging/~unity-team/unity/x-sru2
Andrea Azzarone (community): Approve
Diff: 3147 lines (+1049/-409)
58 files modified
UnityCore/GnomeSessionManager.cpp (+2/-1)
com.canonical.Unity.gschema.xml (+38/-0)
dash/DashController.cpp (+6/-2)
dash/DashView.cpp (+14/-10)
dash/StandaloneDash.cpp (+1/-1)
dash/previews/PreviewContainer.cpp (+35/-76)
dash/previews/PreviewContainer.h (+4/-9)
dash/previews/StandaloneApplicationPreview.cpp (+5/-0)
dash/previews/StandaloneErrorPreview.cpp (+5/-0)
dash/previews/StandaloneMoviePreview.cpp (+5/-0)
dash/previews/StandaloneMusicPaymentPreview.cpp (+5/-0)
dash/previews/StandaloneSocialPreview.cpp (+5/-0)
debian/changelog (+47/-0)
debian/unity7.conf (+11/-6)
hud/HudController.cpp (+5/-2)
launcher/ApplicationLauncherIcon.cpp (+2/-4)
launcher/ApplicationLauncherIcon.h (+3/-0)
launcher/CairoBaseWindow.cpp (+6/-2)
launcher/FileManagerLauncherIcon.cpp (+8/-0)
launcher/Launcher.cpp (+44/-32)
launcher/LauncherController.cpp (+2/-6)
launcher/LauncherControllerPrivate.h (+0/-1)
launcher/SwitcherController.cpp (+6/-1)
launcher/SwitcherView.cpp (+3/-0)
launcher/VolumeImp.cpp (+4/-1)
lockscreen/CMakeLists.txt (+1/-0)
lockscreen/LockScreenAcceleratorController.cpp (+167/-148)
lockscreen/LockScreenAcceleratorController.h (+8/-3)
lockscreen/LockScreenAccelerators.cpp (+5/-0)
lockscreen/LockScreenAccelerators.h (+3/-1)
lockscreen/LockScreenButton.cpp (+148/-0)
lockscreen/LockScreenButton.h (+70/-0)
lockscreen/LockScreenController.cpp (+9/-3)
lockscreen/LockScreenController.h (+3/-1)
lockscreen/UserAuthenticatorPam.cpp (+14/-5)
lockscreen/UserPromptView.cpp (+113/-13)
lockscreen/UserPromptView.h (+9/-1)
panel/PanelView.cpp (+16/-11)
plugins/unityshell/src/UnityShowdesktopHandler.cpp (+4/-3)
plugins/unityshell/src/unityshell.cpp (+40/-20)
plugins/unityshell/src/unityshell.h (+6/-0)
shortcuts/ShortcutController.cpp (+7/-1)
shutdown/SessionController.cpp (+7/-2)
tests/test_lockscreen_controller.cpp (+8/-4)
unity-shared/BGHash.cpp (+6/-1)
unity-shared/BGHash.h (+1/-1)
unity-shared/BackgroundEffectHelper.cpp (+1/-1)
unity-shared/DashStyle.cpp (+39/-0)
unity-shared/DashStyle.h (+5/-0)
unity-shared/GnomeKeyGrabber.cpp (+32/-6)
unity-shared/GnomeKeyGrabberImpl.h (+8/-1)
unity-shared/KeyGrabber.h (+4/-0)
unity-shared/OverlayRenderer.cpp (+6/-6)
unity-shared/PlacesOverlayVScrollBar.cpp (+2/-1)
unity-shared/SpreadFilter.cpp (+5/-1)
unity-shared/UnitySettings.cpp (+29/-18)
unity-shared/UnitySettings.h (+6/-2)
unity-shared/UnityWindowView.cpp (+1/-1)
lp://qastaging/~ci-train-bot/unity/unity-ubuntu-xenial-landing-063 (Merged)
Aleksey Vazhnov (aleksey-vazhnov)
description: updated
Aleksey Vazhnov (aleksey-vazhnov)
tags: added: lockscreen unity-panel-service
Marco Trevisan (Treviño) (3v1n0)
Changed in unity:
assignee: nobody → Andrea Azzarone (azzar1)
Marco Trevisan (Treviño) (3v1n0)
Changed in unity (Ubuntu):
assignee: nobody → Andrea Azzarone (azzar1)
Fabio Marconi (fabiomarconi)
Changed in unity:
status: New → Confirmed
Changed in unity (Ubuntu):
status: New → Confirmed
Andrea Azzarone (azzar1)
Changed in unity:
importance: Undecided → High
Changed in unity (Ubuntu):
importance: Undecided → High
Changed in unity:
status: Confirmed → Triaged
Changed in unity (Ubuntu):
status: Confirmed → Triaged
Andrea Azzarone (azzar1)
tags: added: desktop-trello-import
Revision history for this message
Andrea Azzarone (azzar1) wrote : Automatically added comment

Added to Trello: https://trello.com/c/KV7ozI62/13-bug-1460649-can-t-unlock-screen-with-last-day-password-before-expired

tags: removed: desktop-trello-import
Andrea Azzarone (azzar1)
no longer affects: unity
Changed in unity (Ubuntu):
status: Triaged → In Progress
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package unity - 7.5.0+16.10.20160628.1-0ubuntu1

---------------
unity (7.5.0+16.10.20160628.1-0ubuntu1) yakkety; urgency=medium

  [ Andrea Azzarone ]
  * UnitySettings: Add an option to enable/disable pam account checking.
    (LP: #1460649)
  * Lockscreen: Make sure warning and errors are properly shown to the
    user (LP: #1593696)

 -- Marco Trevisan (Treviño) <mail@3v1n0.net> Tue, 28 Jun 2016 16:23:47 +0000

Changed in unity (Ubuntu):
status: In Progress → Fix Released
Marco Trevisan (Treviño) (3v1n0)
description: updated
Revision history for this message
Brian Murray (brian-murray) wrote : Please test proposed package

Hello Aleksey, or anyone else affected,

Accepted unity into xenial-proposed. The package will build now and be available at https://launchpad.net/ubuntu/+source/unity/7.4.0+16.04.20160705-0ubuntu1 in a few hours, and then in the -proposed repository.

Please help us by testing this new package. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Your feedback will aid us getting this update out to other Ubuntu users.

If this package fixes the bug for you, please add a comment to this bug, mentioning the version of the package you tested, and change the tag from verification-needed to verification-done. If it does not fix the bug for you, please add a comment stating that, and change the tag to verification-failed. In either case, details of your testing will help us make a better decision.

Further information regarding the verification process can be found at https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in advance!

Changed in unity (Ubuntu Xenial):
status: New → Fix Committed
tags: added: verification-needed
Marco Trevisan (Treviño) (3v1n0)
tags: added: verification-done
removed: verification-needed
Revision history for this message
Steve Langasek (vorlon) wrote :

Hello Aleksey, or anyone else affected,

Accepted unity into xenial-proposed. The package will build now and be available at https://launchpad.net/ubuntu/+source/unity/7.4.0+16.04.20160715-0ubuntu1 in a few hours, and then in the -proposed repository.

Please help us by testing this new package. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Your feedback will aid us getting this update out to other Ubuntu users.

If this package fixes the bug for you, please add a comment to this bug, mentioning the version of the package you tested, and change the tag from verification-needed to verification-done. If it does not fix the bug for you, please add a comment stating that, and change the tag to verification-failed. In either case, details of your testing will help us make a better decision.

Further information regarding the verification process can be found at https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in advance!

tags: removed: verification-done
tags: added: verification-needed
Marco Trevisan (Treviño) (3v1n0)
tags: added: verification-done
removed: verification-needed
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package unity - 7.4.0+16.04.20160715-0ubuntu1

---------------
unity (7.4.0+16.04.20160715-0ubuntu1) xenial; urgency=medium

  [ Eleni Maria Stea ]
  * PanelView: Don't draw it if the geo doesn't intersect the monitor
    geo (as in ezoom)
  * speeds up the showdesktop plugin in lowgfx mode

  [ Andrea Azzarone ]
  * Add whitelist for auto-repated keys. (LP: #1586491)
  * Fix scale window activation if in show desktop mode. (LP: #1582056)
  * Order matters in the rendering. Draw launcher shadow after the
    background in all cases. (LP: #1586374)
  * Fallback to volume name if no other identifier is available. (LP:
    #1103593)
  * Do not trigger screensaver on session inactive. (LP: #1587507)
  * Use SwitcherController::SetDetail instead of detail=... (LP:
    #1587618)
  * UnitySettings: Add an option to enable/disable pam account checking.
    (LP: #1460649)
  * Lockscreen: Make sure warning and errors are properly shown to the
    user (LP: #1593696)
  * Add missing header to fix compilation error with -Duse_pch=OFF.
  * Filter out fullscreen window in show desktop mode. (LP: #1597706)
  * Make sure file manager icon is not removed when unpinned. (LP:
    #1578792)
  * Properly calculate the intersection geometry in PanelView::Draw.
    This is needed to properly call SyncGeometries and to avoid problems
    such as lp:1595698. (LP: #1595698)

  [ Alberto Milone ]
  * UnitySettings: Add dconf keys for disabling multitouch gestures (LP:
    #1589520)

  [ Marco Trevisan (Treviño) ]
  * LockScreenAcceleratorController: use key::Grabber to handle allowed
    bindings (LP: #1438754)
  * LockScreenAcceleratorController: check if a setting key is available
    instead of crashing
  * ApplicationLauncherIcon: ensure quirks are properly set on icon
    initialization
  * Views: Toggle animators durations based on low-gfx setting (LP:
    #1598770)
  * unity7.conf: use different compiz profile based on
    unity_support_test result (LP: #1598770)

 -- Marco Trevisan (Treviño) <mail@3v1n0.net> Fri, 15 Jul 2016 10:14:41 +0000

Changed in unity (Ubuntu Xenial):
status: Fix Committed → Fix Released
Revision history for this message
Adam Conrad (adconrad) wrote : Update Released

The verification of the Stable Release Update for unity has completed successfully and the package has now been released to -updates. Subsequently, the Ubuntu Stable Release Updates Team is being unsubscribed and will not receive messages about this bug report. In the event that you encounter a regression using the package from -updates please report a new bug using ubuntu-bug and tag the bug report regression-update so we can easily find any regressions.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.