13.04 no prompt for password on the login screen when password set via passwd

Bug #1156048 reported by bear7
10
This bug affects 2 people
Affects Status Importance Assigned to Milestone
gnome-screensaver (Ubuntu)
Confirmed
Undecided
Unassigned

Bug Description

Steps to reproduce issue:
This is not inital account. It's an additional account (2nd user in system) which i tried to add after installation.

1. Create new Administrator user account.
2. Do not create the password for this account just activate account - give to this account possibility to log in without password.
3. Log out from current user and log in to new user account.
4. Run terminal and add/set password for this account via passwd:
passwd
i created a simple password like qwerty
5. log out and try to log in again.

In my case, i still could log in to this account without password prompt - instead of password prompt i have only Log in button - which i think this shouldn't be an option and user should be asked already for password. What is also strange, when i tried to change the password via System Settings->User accounts i was able to do it but still i could log in to system without password prompt.

Other thing to point out is why during installation for initial account i can setup as my password "qwertyu" but then when i'm trying to create new user this password would be to weak but i don't have this problem when i'm adding password via passwd terminal command? I think i should be:
a) no weak passwrod even during initial setup;
b) when creating weak password customer is warn but able to continue anyway.

 lsb_release -rd
Description: Ubuntu Raring Ringtail (development branch)
Release: 13.04

ProblemType: Bug
DistroRelease: Ubuntu 13.04
Package: gnome-screensaver 3.6.1-0ubuntu3
ProcVersionSignature: Ubuntu 3.8.0-12.21-generic 3.8.2
Uname: Linux 3.8.0-12-generic x86_64
ApportVersion: 2.9.1-0ubuntu1
Architecture: amd64
Date: Sat Mar 16 20:36:23 2013
GnomeSessionIdleInhibited: No
GnomeSessionInhibitors: None
GsettingsGnomeSession:
 org.gnome.desktop.session idle-delay uint32 600
 org.gnome.desktop.session session-name 'ubuntu'
InstallationDate: Installed on 2013-03-01 (14 days ago)
InstallationMedia: Ubuntu 13.04 "Raring Ringtail" - Alpha amd64 (20130301)
MarkForUpload: True
SourcePackage: gnome-screensaver
Symptom: security
Title: Screen locking issue
UpgradeStatus: No upgrade log present (probably fresh install)

Revision history for this message
bear7 (bear7) wrote :
bear7 (bear7)
information type: Private Security → Public
bear7 (bear7)
summary: - no prompt for password on the login screen
+ 13.04 no prompt for password on the login screen when password set via
+ passwd
Revision history for this message
Launchpad Janitor (janitor) wrote :

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in gnome-screensaver (Ubuntu):
status: New → Confirmed
Revision history for this message
Simon SimonG (simongmilsimon) wrote :

Similar issue here. I created a secondary account following this procedure:

Open User Accounts and unlock it with my administrator password.
Create a new account

Type: Administrator
FullName: Testme
Username: testme

Once created, click on the user. Under Login options, the Password displays 'Account Disabled'. Click on 'Account disabled' and a popup will open.

Set the Action dropdown (for the Change password popup) to 'Login without a password' and click Change. Close the User Accounts window and logout.

Test the new Testme account to make sure it can login without a password.

Under the Testme account, open User Accounts and highlight the Testme. Under Login options, the password field should display None. Click on None to open the Change Password popup. Select the 'Set Password now' option and enter a valid password. Close the User Accounts window and logout.

Although the Testme account now has a password, you can still log into it without a password.

Revision history for this message
Simon SimonG (simongmilsimon) wrote :

Found a fix. Google pointed me to http://askubuntu.com/questions/100010/no-password-asked-at-login-screen-just-start-session-button-with-lightdm.

Thanks to user sisco311 from ubuntuforums.org for this answer [http://ubuntuforums.org/showthread.php?p=11566335]

sudo gpasswd -d $USER nopasswdlogin

After running this command from the gnome-terminal, I had to enter a password to login into the Testme account.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.