Bug 4934 - drakconf cannot be launched as user on 32 bits
Summary: drakconf cannot be launched as user on 32 bits
Status: RESOLVED FIXED
Alias: None
Product: Mageia
Classification: Unclassified
Component: RPM Packages (show other bugs)
Version: Cauldron
Hardware: i586 Linux
Priority: Normal critical
Target Milestone: ---
Assignee: Thierry Vignaud
QA Contact:
URL:
Whiteboard:
Keywords:
: 4928 (view as bug list)
Depends on:
Blocks:
 
Reported: 2012-03-13 23:45 CET by Anne Nicolas
Modified: 2012-07-25 19:43 CEST (History)
2 users (show)

See Also:
Source RPM:
CVE:
Status comment:


Attachments
Password problem. Translation:You started "drakroam". This program needs root privileges to run, so provide to following information: Authenticating as "fathom" (33.48 KB, image/png)
2012-07-25 19:43 CEST, Tamás Hajdu
Details

Description Anne Nicolas 2012-03-13 23:45:50 CET
Working on beta2 isos, DVD 32 bits was installed. then whatever the environment, mcc could not be launched by user anymore, getting error message about "wrong password".

After some investigation, it seems like /etc/pam.d/simple_root_authen was truncated.  I got 

# cat /etc/pam.d/simple_root_authen

auth    required        pam_succeed_if.so       quiet user != xguest

So I would say xguest is the culprit but I cannot see how it happens

# cat /usr/bin/xguest-add-helper
...
# prevent accessing most configuration tools (mcc still available with root password)
for i in /etc/pam.d/{mageia-simple-auth,simple_root_authen,urpmi.update}; do
        fgrep -q xguest $i && continue
        echo -e "\nauth\trequired\tpam_succeed_if.so\tquiet user != xguest" >> $i
done
Comment 1 Anne Nicolas 2012-03-13 23:54:20 CET
Only mageia-simple-auth,simple_root_authen are truncated. urpmi.update is ok
Comment 2 Anne Nicolas 2012-03-14 00:00:12 CET
As suggested by boklm, xguest may be installed before usermode-consoleonly as both mageia-simple-auth and simple_root_authen  are provided by usermode-consoleonly. What about adding requires on usermode-consoleonly for xguest ?
Anne Nicolas 2012-03-14 00:00:28 CET

Assignee: bugsquad => thierry.vignaud

Comment 3 Manuel Hiebel 2012-03-14 00:07:04 CET
oliver opened a bug before you but I will keep this one as seems there is more info
Comment 4 Manuel Hiebel 2012-03-14 00:13:07 CET
*** Bug 4928 has been marked as a duplicate of this bug. ***

CC: (none) => oliver.bgr

Comment 5 Anne Nicolas 2012-03-14 09:13:14 CET
Submitted, will be included in next set of isos for beta 2 prerelease
Comment 6 Thierry Vignaud 2012-03-14 09:35:03 CET
Should be a requires(post)
Comment 7 Anne Nicolas 2012-03-14 10:03:54 CET
That's what I did, wrong description, sorry for that
Comment 8 Anne Nicolas 2012-03-14 14:22:20 CET
fixed in fresh install for beta2 pre release

Status: NEW => RESOLVED
Resolution: (none) => FIXED

Comment 9 Tamás Hajdu 2012-07-25 19:39:44 CEST
I have the exact same error message for all drak* tools on the latest cauldron. I can run them as root, but not as any other user. PAM configuration still seems good, but here is a couple of things:
rpm -V usermode-consoleonly usermode
S.5....T.  c /etc/pam.d/mageia-simple-auth
S.5....T.  c /etc/pam.d/simple_root_authen

cat /etc/pam.d/mageia-simple-auth
#%PAM-1.0
auth       sufficient   pam_rootok.so
auth       required     pam_console.so
auth       sufficient   pam_timestamp.so
auth       include      system-auth
account    required     pam_permit.so
session    optional     pam_timestamp.so
session    optional     pam_xauth.so

auth    required        pam_succeed_if.so       quiet user != xguest

cat /etc/pam.d/simple_root_authen
#%PAM-1.0
auth       sufficient   pam_rootok.so
auth       sufficient   pam_timestamp.so
auth       include      system-auth
session    required     pam_permit.so
session    optional     pam_xauth.so
session    optional     pam_timestamp.so
account    required     pam_permit.so

auth    required        pam_succeed_if.so       quiet user != xguest

If I change the settings in draksec to ask for a password, it still wont work. If I switch it to ask for root password then it says it needs root privileges, but then it points to the user and accepts nothing as good password. I attach a pic about that. It is the same if I set it to ask for user password. On the attachment you will see it in Hungarian, but I think you will get the problem.

CC: (none) => fathom

Comment 10 Tamás Hajdu 2012-07-25 19:43:58 CEST
Created attachment 2582 [details]
Password problem. Translation:You started "drakroam".  This program needs root privileges to run, so provide to following information: Authenticating as "fathom"

Note You need to log in before you can comment on or make changes to this bug.