Bug 3328 - MageiaUpdate over SSH unable to auth with non root user
Summary: MageiaUpdate over SSH unable to auth with non root user
Status: RESOLVED INVALID
Alias: None
Product: Mageia
Classification: Unclassified
Component: RPM Packages (show other bugs)
Version: 1
Hardware: x86_64 Linux
Priority: Normal normal
Target Milestone: ---
Assignee: Mageia Bug Squad
QA Contact:
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2011-11-12 10:00 CET by claire robinson
Modified: 2012-02-08 11:55 CET (History)
7 users (show)

See Also:
Source RPM: mgaonline, pam
CVE:
Status comment:


Attachments

Description claire robinson 2011-11-12 10:00:19 CET
Description of problem:


Hi.

This is an odd one. It's not something everybody will do obviously but it's useful when doing QA.

When running MageiaUpdate as a normal user, using remote X over ssh, it brings up an authentication box as normal asking for the user password. It wont accept the password though.

/var/log/auth.log shows..

Nov 12 08:51:00 mega userhelper[15777]: pam_tcb(mageiaupdate:auth): Authentication passed for claire from claire(uid=500)
Nov 12 08:51:05 mega userhelper[15777]: pam_tcb(mageiaupdate:auth): conversation failed
Nov 12 08:51:05 mega userhelper[15777]: pam_tcb(mageiaupdate:auth): Unable to obtain a password


It's easy to dismiss it as just a quirk of using remote X over ssh but when I use mcc instead and it asks for the root password it authenticates with no problems.

Nov 12 08:57:22 mega userhelper[19615]: pam_tcb(simple_root_authen:auth): Authentication passed for root from claire(uid=500)
Nov 12 08:57:22 mega userhelper[19620]: running '/usr/sbin/drakconf.real ' with root privileges on behalf of 'claire'


I'm not sure if this is an issue with MageiaUpdate or pam_tcb or just a configuration problem.
Manuel Hiebel 2011-11-13 13:22:24 CET

Source RPM: MageiaUpdate pam_tcb => mgaonline, pam

Comment 1 Marja Van Waes 2012-01-07 13:06:55 CET
cc'ing some mgaonline and pam committers

@ Claire

I supppose this bug is still valid?

Keywords: (none) => NEEDINFO
CC: (none) => dmorganec, mageia, mageia, marja11, thierry.vignaud, tmb

Comment 2 claire robinson 2012-01-07 16:27:18 CET
Actually no, it looks like something we've updated has fixed this.

Thanks Marja, I'll close it.

Status: NEW => RESOLVED
Resolution: (none) => FIXED

Comment 3 claire robinson 2012-02-06 15:54:13 CET
Reopening as this is still an issue. Not sure why it worked before - unless I didn't check it properly :\

MageiaUpdate as normal user over ssh, unable to auth.

Status: RESOLVED => REOPENED
Resolution: FIXED => (none)

Comment 4 Manuel Hiebel 2012-02-06 15:57:53 CET
I can reproduce with rpmdrake, but it works with drakconf (in cauldron)

Keywords: NEEDINFO => (none)

Comment 5 Dave Hodgins 2012-02-06 20:31:07 CET
After you connect, as a regular user try "sudo /usr/sbin/MageiaUpdate".

CC: (none) => davidwhodgins

Comment 6 claire robinson 2012-02-06 23:43:17 CET
$ su -c "MageiaUpdate" -

works, but as with sudo it effectively starts MageiaUpdate as root.

The problem is that it should be able to be started as non-root, asking for the normal user password.

Locally that works fine but over ssh for some reason it fails.
Comment 7 claire robinson 2012-02-08 11:55:45 CET
This is working again today!

I've no idea why it sometimes works and sometimes doesn't. I can't reproduce the behaviour now. I think I'll close this again and if it happens again do some further digging before reopening.

Status: REOPENED => RESOLVED
Resolution: (none) => INVALID


Note You need to log in before you can comment on or make changes to this bug.