Bug 178002 - I can`t unlock the screen
Summary: I can`t unlock the screen
Status: RESOLVED DOWNSTREAM
Alias: None
Product: kscreensaver
Classification: Miscellaneous
Component: kcheckpass (show other bugs)
Version: unspecified
Platform: Compiled Sources Unspecified
: NOR normal
Target Milestone: ---
Assignee: kscreensaver bugs tracking
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2008-12-17 19:49 UTC by msnkipa
Modified: 2015-01-23 14:48 UTC (History)
6 users (show)

See Also:
Latest Commit:
Version Fixed In:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description msnkipa 2008-12-17 19:49:45 UTC
Version:            (using Devel)
Installed from:    Compiled sources

I lock the screen, and then I try to unlock the screen, but I can`t to do it. I enter valid and correct password, but in answer I have message that password incorrect.
Comment 1 Oswald Buddenhagen 2008-12-18 08:55:26 UTC

*** This bug has been marked as a duplicate of bug 177450 ***
Comment 2 msnkipa 2009-01-03 02:19:28 UTC
So problem in bug 177450 is that kcheckpass must be suid root, so in my instalation I have

-rwsr-xr-x 1 root users 45414 Янв  1 23:40 kcheckpass

but I can`t unlock the screen! So I reopen bug.
I use recent svn trunk
Comment 3 Oswald Buddenhagen 2009-01-04 18:11:15 UTC
ok, this might sound stupid ... but sometimes it is necessary to make it *not* setuid root. can you try it? :}

try running kcheckpass on the command line and see what it says.

examine the authpriv.* syslog facility for messages from PAM.
Comment 4 msnkipa 2009-01-05 20:54:24 UTC
Yes I have tried both variants. when kcheckpass not setuid it doesn`t work from command line, when it`s setuid it works prefectly from command line. 
Comment 5 Oswald Buddenhagen 2009-01-05 21:08:22 UTC
wait, do you have russian (or other non-ascii) characters in the password?
Comment 6 msnkipa 2009-01-05 22:20:26 UTC
No only ascii, and only latin symbols (no special symbols or digits)
Comment 7 Oswald Buddenhagen 2009-01-06 10:18:06 UTC
that might indicate that you have configured the use of different pam services for different things, but the service definition for the screen saver does not actually exist. check like that: while the unlock dialog is up, switch to a text console and run "ps ax|grep '[k]checkpass'" (note that you have to be fast, as the dialog goes away) to find the actual kcheckpass call. try running that command on the command line. the -s parameter names the service definition that should be found in /etc/pam.d/. if there is none, make install as root in workspace/krunner/lock should fix it, otherwise you'll have more "fun".
Comment 8 msnkipa 2009-01-06 14:37:17 UTC
Yes I have a great fun! kcheckpass works prefectly well, but it ... doesn`t called when unlock dialog work! NO [k]checkpass process during I enter password in dialog appears. I know about it because I use such script in console:

#!/bin/sh

echo > result.txt

while [ -f work ]
do
        ps aux | grep checkpass >> result.txt
done

echo FINISH!

which work during I`m tying to unlock the screen. Native 4.1.3 KDE thats distributed with OpenSUSE 11.1 works prefectly. But Compiled from sources in home directory, works as I describes. Have you got any idea about it? 
Comment 9 Chani 2009-01-06 21:04:38 UTC
ahh, suse. I had the same problem: making it suid root isn't enough on suse. I never solved the problem, though :( maybe you can drag a suse person over here and ask them what extra security they've got that's getting in the way?

once we find a solution we should put it on techbase for the benefit of other suse users.
Comment 10 Chani 2009-01-06 21:14:32 UTC
SSJ_GZ suggests changing it from root.users to root.root - does that help any?


btw, it was using kcheckpass in my case - I symlinked it to /bin/true and then I could unlock the screen with anything :) defeats the purpose of locking, though, unless your only concern is cats walking on the keyboard.
Comment 11 matthias sweertvaegher 2009-02-14 16:06:16 UTC
Hi,

I had exactly the same problem on suse 11.1 with my own built trunk version (suse packages work OK). So I had a look at how the kcheckpass from packages is configured. It indeed has the suid bit and must be owned by root. I also noticed the group was set to 'nogroup' (dont know if this is the missing part for people still having the problem).

so I did:
chown root:nogroup kcheckpass 
chmod u+s kcheckpass

and the unlocking works now! =)
Comment 12 m0nk 2009-08-02 00:40:56 UTC
Same here:
KDE 4.3 RC3 from openSUSE (11.1) on Thinkpad
I even don't get a dialog to enter the password or swipe a finger.
The only dialog is: 
Session locked by XXX 
Authentication failed
All three buttons are greyed out.

This is annoying, especially on notebooks, where screen locking is often used
Comment 13 Lamarque V. Souza 2011-04-09 08:40:16 UTC
Is this still happening?
Comment 14 Tirtha Chatterjee 2011-06-23 00:16:45 UTC
(In reply to comment #13)
> Is this still happening?

Yes this is still happening. I built KDE 4.6.80 from KDE trunk, on Fedora 14. I am not being able to unlock even after i did

sudo chown root kcheckpass
sudo chmod u+s kcheckpass
Comment 15 Tirtha Chatterjee 2011-06-23 00:41:00 UTC
Though it worked when i installed kcheckpass with sudo make install, giving it the right permissions.
Comment 16 Martin Flöser 2015-01-23 14:48:07 UTC
distro configuration issue