Can't change user password on a "System Settings" (polkit dialog doesn't appear)

[xalt7x]

On Kubuntu 22.04 even with "Kubuntu Backports" PPA I can't change password because dialog which asks elevated rights (sudo/root password) doesn't appear

How to reproduce:
1) Go to System Settings > Users
2) Click "Change password" and enter new password

What should happen:
1) After click on button "Set Password" user is asked for administrator password
2) User is notified that it's better to change Kwaller password as well

What currently happens:
1) Dialog closes
2) No warning about KWallet
3) Password doesn't change

If I launch systemsettings with elevated rights
Like
pkexec env DISPLAY=$DISPLAY XAUTHORITY=$XAUTHORITY KDE_SESSION_VERSION=5 KDE_FULL_SESSION=true systemsettings5 kcm_users
or
sudo systemsettings5 kcm_users
Password changes but KWallet warning doesn't appear

I tried it on a clean "minimal" install inside virtual machine.
I also tried openSUSE Leap 15.4 (which also has KDE Plasma 5.24) and password change works there.
---
ProblemType: Bug
ApportVersion: 2.20.11-0ubuntu82.1
Architecture: amd64
CasperMD5CheckResult: pass
CurrentDesktop: KDE
DistroRelease: Ubuntu 22.04
InstallationDate: Installed on 2022-07-31 (0 days ago)
InstallationMedia: Kubuntu 22.04 LTS "Jammy Jellyfish" - Release amd64 (20220419)
Package: systemsettings 4:5.24.4-0ubuntu1
PackageArchitecture: amd64
ProcVersionSignature: Ubuntu 5.15.0-43.46-generic 5.15.39
Tags: jammy
Uname: Linux 5.15.0-43-generic x86_64
UpgradeStatus: No upgrade log present (probably fresh install)
UserGroups: adm cdrom dip lpadmin lxd plugdev sambashare sudo
_MarkForUpload: True

[lotuspsychje (lotuspsychje)]

Thank you for taking the time to report this bug and helping to make Ubuntu better. Please execute the following command only once, as it will automatically gather debugging information, in a terminal:
apport-collect 1983245

When reporting bugs in the future please use apport by using 'ubuntu-bug' and the name of the package affected. You can learn more about this functionality at https://wiki.ubuntu.com/ReportingBugs.

[xalt7x (xalt7x)]

apport information

[xalt7x (xalt7x)]

apport information

[xalt7x (xalt7x)]

apport information

[xalt7x (xalt7x)]

So just to make sure I've tried VM with a "normal" installation of Kubuntu 22.04 and English locale.
Now it's safe to say that this bug is 100% reproducible.
I tested other Debian-based distros:
- Kubuntu 22.10/kinetic daily build (2022-08-06) - broken
- Debian Testing (weekly build from 2022-08-01) - broken
- KDE Neon (build from 2022-08-04, based on 20.04) - works
- Debian 11.4 - works.
Debian 11 with latest KDE packages (Norbert Preining backports) - still works

[Jjhesrbhf (jjhesrbhf)]

SUMMARY
***
I'm unable to change the current user's password using KDE users settings. When I press Set Password button - nothing is changed.
***

STEPS TO REPRODUCE
1. Open Users settings
2. Press Change Password
3. Input the new password and the confirmation
4. Press Set Password

OBSERVED RESULT
Nothing is changed. I can login using my old password

EXPECTED RESULT
I can login using the new password

SOFTWARE/OS VERSIONS
Linux/KDE Plasma: 5.19.9-arch1-1 (x64)
KDE Plasma Version: 5.25.5
KDE Frameworks Version: 5.98.0
Qt Version: 5.15.6

ADDITIONAL INFORMATION

[G-kde (g-kde)]

Your password may be too short, try to change it to the one you tried on the terminal with passwd
See my report https://bugs.kde.org/show_bug.cgi?id=459430

[Jjhesrbhf (jjhesrbhf)]

(In reply to Marc Guhr from comment #1)
> Your password may be too short, try to change it to the one you tried on the
> terminal with passwd
> See my report https://bugs.kde.org/show_bug.cgi?id=459430

Just tried the following:
1. Changed password using passwd
2. Tried to set it back using UI
3. Set it back using passwd

Still nothing is changed from UI settings but works with passwd. So it doesn't seem to be related to the password length

[Nate-b (nate-b)]

Can you run `systemsettings kcm_users` in a terminal window?

Then clear the scrollback with Ctrl+Shift+K.

Then change the password.

After that, please paste any new output in the terminal window into a comment here. Thanks!

[Jjhesrbhf (jjhesrbhf)]

(In reply to Nate Graham from comment #3)
> Can you run `systemsettings kcm_users` in a terminal window?
>
> Then clear the scrollback with Ctrl+Shift+K.
>
> Then change the password.
>
> After that, please paste any new output in the terminal window into a
> comment here. Thanks!

No new output appeared. But I noticed the following error on first run, maybe it will help.

file:///usr/share/kpackage/kcms/kcm_users/contents/ui/UserDetailsPage.qml:345: ReferenceError: modelData is not defined
QFSFileEngine::open: No file name specified
kf.coreaddons.desktopparser: Error: Failed to open ""
QFileDevice::seek: IODevice is not open

[Nate-b (nate-b)]

Darn. Thanks anyway.

[Launchpad Janitor (janitor)]

Status changed to 'Confirmed' because the bug affects multiple users.

[Rik Mills (rikmills)]

Also seen in Kubuntu and Debian:

https://bugs.launchpad.net/systemsettings/+bug/1983245

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1016785

[Rik Mills (rikmills)]

Also confirmed on fresh install of the KDE Neon 22.04 preview

[Nate-b (nate-b)]

I wonder if an accountsservice regression might have caused this? I have version 0.6.55 in Fedora. What versions are affected folks using?

[Rik Mills (rikmills)]

On 26/09/2022 17:47, Nate-b wrote:
> I wonder if an accountsservice regression might have caused this? I have
> version 0.6.55 in Fedora. What versions are affected folks using?

https://packages.ubuntu.com/jammy-updates/accountsservice

https://changelogs.ubuntu.com/changelogs/pool/main/a/accountsservice/accountsservice_22.07.5-2ubuntu1.3/changelog

[Rik Mills (rikmills)]

(In reply to Nate Graham from comment #8)
> I wonder if an accountsservice regression might have caused this? I have
> version 0.6.55 in Fedora. What versions are affected folks using?

22.07.5 it seems.

https://packages.ubuntu.com/jammy-updates/accountsservice

Downgrading accountsservice and libaccountsservice0 in the Neon Jammy 22.04 preview to the 0.6.55 from Focal, does seem to fix the issue.

[Rik Mills (rikmills)]

Downgrading accountservice packages to the versions from Focal does seem to make things work

[Rik Mills (rikmills)]

(In reply to Rik Mills from comment #9)
> Downgrading accountsservice and libaccountsservice0 in the Neon Jammy 22.04
> preview to the 0.6.55 from Focal, does seem to fix the issue.

So does doing the same on Kubuntu 22.04

[Nate-b (nate-b)]

So it looks like there are two options here:
1. It was an unintentional regression in accountsservice that needs to be fixed
2. It was an intentional change in accountsservice (perhaps we were using the API wrong, or using deprecated API) and we need to adapt to it

Someone with accountsservice experience will need to investigate or bisect it.

[Marco Martin (notmart)]

It seems that when you try to change the password polkit doesn't ask for authentication and doesn't do anything.

if you do something else before, like changing the real name, it authenticates, and from now on, changing the password will work.

[Bug-janitor (bug-janitor)]

A possibly relevant merge request was started @ https://invent.kde.org/plasma/plasma-workspace/-/merge_requests/2175

[Marco Martin (notmart)]

Git commit 48ccb433ca79e94ef705734d9cab599f01df97e8 by Marco Martin.
Committed on 28/09/2022 at 09:33.
Pushed by mart into branch 'master'.

set setInteractiveAuthorizationAllowed on SetPassword call

is important that the setpasswod call uses interactive authorization,
otherwise will be denied, unless the user had been modified beforehand
so an authorization was already granted

M +8 -3 kcms/users/src/user.cpp

https://invent.kde.org/plasma/plasma-workspace/commit/48ccb433ca79e94ef705734d9cab599f01df97e8

[Marco Martin (notmart)]

Git commit 84dcfc45b9a354827b9bbf6ae58902d04e8fe915 by Marco Martin.
Committed on 28/09/2022 at 09:51.
Pushed by mart into branch 'Plasma/5.25'.

set setInteractiveAuthorizationAllowed on SetPassword call

is important that the setpasswod call uses interactive authorization,
otherwise will be denied, unless the user had been modified beforehand
so an authorization was already granted

M +8 -3 kcms/users/src/user.cpp

https://invent.kde.org/plasma/plasma-workspace/commit/84dcfc45b9a354827b9bbf6ae58902d04e8fe915

[Marco Martin (notmart)]

Git commit 9043786def19940129c341a7c550aebe7406c6f5 by Marco Martin.
Committed on 28/09/2022 at 09:50.
Pushed by mart into branch 'Plasma/5.26'.

set setInteractiveAuthorizationAllowed on SetPassword call

is important that the setpasswod call uses interactive authorization,
otherwise will be denied, unless the user had been modified beforehand
so an authorization was already granted

M +8 -3 kcms/users/src/user.cpp

https://invent.kde.org/plasma/plasma-workspace/commit/9043786def19940129c341a7c550aebe7406c6f5

[Rik Mills (rikmills)]

Note: the KCM in question is shipping in the plasma-workspace package, so changing the launchpad bug to that.

[Nate-b (nate-b)]

Git commit b66f8019a3db00aa1e4e1c54d19f55c9cbff4d12 by Nate Graham, on behalf of Marco Martin.
Committed on 28/09/2022 at 13:57.
Pushed by ngraham into branch 'Plasma/5.24'.

set setInteractiveAuthorizationAllowed on SetPassword call

is important that the setpasswod call uses interactive authorization,
otherwise will be denied, unless the user had been modified beforehand
so an authorization was already granted

(cherry picked from commit 48ccb433ca79e94ef705734d9cab599f01df97e8)

M +8 -3 kcms/users/src/user.cpp

https://invent.kde.org/plasma/plasma-workspace/commit/b66f8019a3db00aa1e4e1c54d19f55c9cbff4d12

[Launchpad Janitor (janitor)]

This bug was fixed in the package plasma-workspace - 4:5.25.5-0ubuntu4

---------------
plasma-workspace (4:5.25.5-0ubuntu4) kinetic; urgency=medium

  * Add upstream_fix-user-password-kcm.patch (LP: #1983245)

 -- Rik Mills <email address hidden> Wed, 28 Sep 2022 12:05:23 +0100

[G-kde (g-kde)]

*** Bug 459430 has been marked as a duplicate of this bug. ***

[Jjhesrbhf (jjhesrbhf)]

Still doesn't work in 5.25.5. It looks like the fix wasn't merged

https://invent.kde.org/plasma/plasma-workspace/-/blob/v5.25.5/kcms/users/src/user.cpp

[Rik Mills (rikmills)]

(In reply to Dmitry Godlevskiy from comment #19)
> Still doesn't work in 5.25.5. It looks like the fix wasn't merged
>
> https://invent.kde.org/plasma/plasma-workspace/-/blob/v5.25.5/kcms/users/src/
> user.cpp

The fix was commited to the 5.25 branch, but as 5.25 will not get any more releases it is up to distros to apply the patch to 5.25.5

[Jjhesrbhf (jjhesrbhf)]

(In reply to Rik Mills from comment #20)
> (In reply to Dmitry Godlevskiy from comment #19)
> > Still doesn't work in 5.25.5. It looks like the fix wasn't merged
> >
> > https://invent.kde.org/plasma/plasma-workspace/-/blob/v5.25.5/kcms/users/src/
> > user.cpp
>
> The fix was commited to the 5.25 branch, but as 5.25 will not get any more
> releases it is up to distros to apply the patch to 5.25.5

Ah okay, thanks