Bug 454065 - More Informative Password Prompt when locked out
Summary: More Informative Password Prompt when locked out
Status: CONFIRMED
Alias: None
Product: policykit-kde-agent-1
Classification: Plasma
Component: general (other bugs)
Version First Reported In: 5.24.5
Platform: Manjaro Linux
: NOR wishlist
Target Milestone: ---
Assignee: ratijas
URL:
Keywords: usability
Depends on:
Blocks:
 
Reported: 2022-05-20 00:48 UTC by Ricky Payne
Modified: 2024-09-08 20:52 UTC (History)
4 users (show)

See Also:
Latest Commit:
Version Fixed/Implemented In:
Sentry Crash Report:


Attachments
Screenshot of the static timer box (108.78 KB, image/png)
2022-05-20 00:48 UTC, Ricky Payne
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Ricky Payne 2022-05-20 00:48:29 UTC
Created attachment 149010 [details]
Screenshot of the static timer box

SUMMARY
***
After typing in an incorrect password three times PAM locks the user from attempting to complete a sudo/kdesu action.  The only notification on how long you have left to try to complete the root action again is a static box, 10 minutes by default on Manjaro, and you have to either bring up a new prompt or type the password incorrectly to see how many minutes are left if you didn't happen to catch the time when you incorrectly entered the wrong password.  Instead of a single, static box that can be closed, a dynamic timer that can't be closed would be friendlier.

I also didn't expect the password prompt to allow me to attempt my password since I was locked out.
***


STEPS TO REPRODUCE
1. Enter your sudo password incorrectly three times; using Caps Lock helps
2. That's it
3. Profit

OBSERVED RESULT
Standard password prompt with an extra a static box with the time left to unlock; time does not change and passwords can still be entered. No notification if a modifier key is or isn't in use.

EXPECTED RESULT
Notification if a modifier key like Caps Lock is or isn't in use before and when entering passwords. 

Countdown timer where the static box is and the password entry form nulled out from new password attempts until the timer completes.

SOFTWARE/OS VERSIONS
Windows: Occasionally 10, but not today.
macOS: Nope!
Linux/KDE Plasma: Manjaro Linux 5.17.9-258-tkg-bmq
FreeBSD: No, but y'all could at least ask. Jeez.
(available in About System)
KDE Plasma Version: 5.24.5
KDE Frameworks Version: 5.93.0
Qt Version: 5.15.3

ADDITIONAL INFORMATION
The only reason I noticed this is that a few weeks ago I pinched a nerve in my left shoulder and yesterday I pulled muscle in my back so I'm not typing as well as I normally do as well as my hands aren't moving as precisely as I'd like so I keep accidentally hitting Caps Lock without realizing it. I did that today and locked myself out of my system for a bit.

While the system tray adds a Caps Lock icon it would be nice if the password prompt would include the status of modifiers like Caps Lock, Num Lock, Sticky Shift, etc. A Caps Lock prompt might have prevented me from entering my password wrong and even noticing what I assumed was a 10 minute timer until it didn't change.

Thank You
Comment 1 ratijas 2022-05-23 16:48:20 UTC
First of all, I'm sorry to hear that. I hope you'll get well soon!

On the topic, I think I had a similar issue with a lock screen. I got locked out without sensible messages several times while developing and testing SDDM/Breeze theme. AFK can't check right now. But if that's still the case, then I'd like to extend the scope of this issue to the lock screen prompt as well.
Comment 2 Ricky Payne 2022-05-24 02:10:23 UTC
(In reply to ratijas from comment #1)
> First of all, I'm sorry to hear that. I hope you'll get well soon!
> 
> On the topic, I think I had a similar issue with a lock screen. I got locked
> out without sensible messages several times while developing and testing
> SDDM/Breeze theme. AFK can't check right now. But if that's still the case,
> then I'd like to extend the scope of this issue to the lock screen prompt as
> well.

(In reply to ratijas from comment #1)
> First of all, I'm sorry to hear that. I hope you'll get well soon!

Already feeling a lot better. Not 100%, but much better.

> On the topic, I think I had a similar issue with a lock screen. I got locked
> out without sensible messages several times while developing and testing
> SDDM/Breeze theme. AFK can't check right now. But if that's still the case,
> then I'd like to extend the scope of this issue to the lock screen prompt as
> well.

I tested the lock and login screen, if it matters I'm using sddm-wayland from Valve's Jupiter repo with the only theme I use, Breeze, and both screens notify that caps lock is down, however, after three incorrect entries I get locked out with around a 3 second long notification above the password bar telling me it was from the three incorrect attempts and that it'll be 10 minutes. Entering an incorrect or correct password results in the same quick notification.