Bug 4934

Summary: drakconf cannot be launched as user on 32 bits
Product: Mageia Reporter: Anne Nicolas <ennael1>
Component: RPM PackagesAssignee: Thierry Vignaud <thierry.vignaud>
Status: RESOLVED FIXED QA Contact:
Severity: critical    
Priority: Normal CC: fathom, oliver.bgr
Version: Cauldron   
Target Milestone: ---   
Hardware: i586   
OS: Linux   
Whiteboard:
Source RPM: CVE:
Status comment:
Attachments: Password problem. Translation:You started "drakroam". This program needs root privileges to run, so provide to following information: Authenticating as "fathom"

Description Anne Nicolas 2012-03-13 23:45:50 CET
Working on beta2 isos, DVD 32 bits was installed. then whatever the environment, mcc could not be launched by user anymore, getting error message about "wrong password".

After some investigation, it seems like /etc/pam.d/simple_root_authen was truncated.  I got 

# cat /etc/pam.d/simple_root_authen

auth    required        pam_succeed_if.so       quiet user != xguest

So I would say xguest is the culprit but I cannot see how it happens

# cat /usr/bin/xguest-add-helper
...
# prevent accessing most configuration tools (mcc still available with root password)
for i in /etc/pam.d/{mageia-simple-auth,simple_root_authen,urpmi.update}; do
        fgrep -q xguest $i && continue
        echo -e "\nauth\trequired\tpam_succeed_if.so\tquiet user != xguest" >> $i
done
Comment 1 Anne Nicolas 2012-03-13 23:54:20 CET
Only mageia-simple-auth,simple_root_authen are truncated. urpmi.update is ok
Comment 2 Anne Nicolas 2012-03-14 00:00:12 CET
As suggested by boklm, xguest may be installed before usermode-consoleonly as both mageia-simple-auth and simple_root_authen  are provided by usermode-consoleonly. What about adding requires on usermode-consoleonly for xguest ?
Anne Nicolas 2012-03-14 00:00:28 CET

Assignee: bugsquad => thierry.vignaud

Comment 3 Manuel Hiebel 2012-03-14 00:07:04 CET
oliver opened a bug before you but I will keep this one as seems there is more info
Comment 4 Manuel Hiebel 2012-03-14 00:13:07 CET
*** Bug 4928 has been marked as a duplicate of this bug. ***

CC: (none) => oliver.bgr

Comment 5 Anne Nicolas 2012-03-14 09:13:14 CET
Submitted, will be included in next set of isos for beta 2 prerelease
Comment 6 Thierry Vignaud 2012-03-14 09:35:03 CET
Should be a requires(post)
Comment 7 Anne Nicolas 2012-03-14 10:03:54 CET
That's what I did, wrong description, sorry for that
Comment 8 Anne Nicolas 2012-03-14 14:22:20 CET
fixed in fresh install for beta2 pre release

Status: NEW => RESOLVED
Resolution: (none) => FIXED

Comment 9 Tamás Hajdu 2012-07-25 19:39:44 CEST
I have the exact same error message for all drak* tools on the latest cauldron. I can run them as root, but not as any other user. PAM configuration still seems good, but here is a couple of things:
rpm -V usermode-consoleonly usermode
S.5....T.  c /etc/pam.d/mageia-simple-auth
S.5....T.  c /etc/pam.d/simple_root_authen

cat /etc/pam.d/mageia-simple-auth
#%PAM-1.0
auth       sufficient   pam_rootok.so
auth       required     pam_console.so
auth       sufficient   pam_timestamp.so
auth       include      system-auth
account    required     pam_permit.so
session    optional     pam_timestamp.so
session    optional     pam_xauth.so

auth    required        pam_succeed_if.so       quiet user != xguest

cat /etc/pam.d/simple_root_authen
#%PAM-1.0
auth       sufficient   pam_rootok.so
auth       sufficient   pam_timestamp.so
auth       include      system-auth
session    required     pam_permit.so
session    optional     pam_xauth.so
session    optional     pam_timestamp.so
account    required     pam_permit.so

auth    required        pam_succeed_if.so       quiet user != xguest

If I change the settings in draksec to ask for a password, it still wont work. If I switch it to ask for root password then it says it needs root privileges, but then it points to the user and accepts nothing as good password. I attach a pic about that. It is the same if I set it to ask for user password. On the attachment you will see it in Hungarian, but I think you will get the problem.

CC: (none) => fathom

Comment 10 Tamás Hajdu 2012-07-25 19:43:58 CEST
Created attachment 2582 [details]
Password problem. Translation:You started "drakroam".  This program needs root privileges to run, so provide to following information: Authenticating as "fathom"