gksu does not repeat password prompt if wrong password

Bug #338151 reported by Renato Golin
10
This bug affects 2 people
Affects Status Importance Assigned to Milestone
gksu (Ubuntu)
New
Undecided
Unassigned
update-manager (Ubuntu)
Invalid
Undecided
Michael Vogt

Bug Description

gksu only asks once for the password and then gives up if a wrong password is given.
It should ask 3 times (and then possibly complain to the user in a dialog?)

See comment #4 how to reproduce.

=== Original report: ===

To the wishlist:

Open update-manager, check for packages to install and click on "install". It'll ask for your password, if you get it wrong it won't tell you. It just refreshes the package listing and show the update manager window again.

I'm running the latest Ubuntu with all updates applied, but it's an issue for a long time, really. It's not critical but it's a big of a nuisance, since I always do multiple things at the same time and I can easily forget to check the update window for hours or even days.

A simple dialog would be fine, but sudo insults (if enable) would be much better. ;)

cheers!

Revision history for this message
Michael Vogt (mvo) wrote :

Thanks for your bugreport

gksu should repeat the prompt three times if there was a typo. What version of ubuntu do you run exactly?

Changed in update-manager:
assignee: nobody → mvo
status: New → Incomplete
Revision history for this message
Renato Golin (rengolin) wrote :

$ uname -a
Linux gargamel 2.6.27-13-generic #1 SMP Thu Feb 26 07:26:43 UTC 2009 i686 GNU/Linux

$ cat /etc/lsb-release
DISTRIB_ID=Ubuntu
DISTRIB_RELEASE=8.10
DISTRIB_CODENAME=intrepid
DISTRIB_DESCRIPTION="Ubuntu 8.10"

All updates applied.

Revision history for this message
Emmanuel Pacaud (emmanuel-pacaud) wrote :

Same issue here, with Lucid, all updates applied:

Linux lappc-p087.in2p3.fr 2.6.32-23-generic #37-Ubuntu SMP Fri Jun 11 07:54:58 UTC 2010 i686 GNU/Linux

DISTRIB_ID=Ubuntu
DISTRIB_RELEASE=10.04
DISTRIB_CODENAME=lucid
DISTRIB_DESCRIPTION="Ubuntu 10.04 LTS"

Changed in update-manager (Ubuntu):
status: Incomplete → New
Revision history for this message
Simon Gerhards (simger-deactivatedaccount) wrote :

Seems like a gksu bug. Starting gksu and entering a wrong password gives this without asking for a password for a second time:
$ gksu -d echo Hello
No ask_pass set, using default!
xauth: /tmp/libgksu-XYZq2S/.Xauthority
STARTUP_ID: gksu/echo 'Hello'/7881-0-simon-notebook_TIME5167444
cmd[0]: /usr/bin/sudo
cmd[1]: -H
cmd[2]: -S
cmd[3]: -p
cmd[4]: GNOME_SUDO_PASS
cmd[5]: -u
cmd[6]: root
cmd[7]: --
cmd[8]: echo
cmd[9]: Hello
buffer: -GNOME_SUDO_PASS-
brute force GNOME_SUDO_PASS ended...
Yeah, we're in...
sudo: 3 incorrect password attempts
 try again.
xauth: /tmp/libgksu-XYZq2S/.Xauthority
xauth_env: /var/run/gdm/auth-for-simon-koKGqm/database
dir: /tmp/libgksu-XYZq2S

Can someone with the problems in update-manager reproduce this? If yes, we should file a bug against gksu.

Revision history for this message
Janne Hyötylä (janne-hyotyla) wrote :

I can reproduce exactly Simon's behaviour.
Added gksu here and set update-manager to invalid.

Changed in update-manager (Ubuntu):
status: New → Invalid
description: updated
summary: - update manager should show invalid sudo password warning
+ gksu does not repeat password prompt if wrong password
description: updated
Revision history for this message
Janne Hyötylä (janne-hyotyla) wrote : apport information

Architecture: amd64
DistroRelease: Ubuntu 10.04
InstallationMedia: Ubuntu 9.10 "Karmic Koala" - Release amd64 (20091027)
Package: gksu 2.0.2-2ubuntu2
PackageArchitecture: amd64
ProcEnviron:
 LANGUAGE=en_US:en
 PATH=(custom, user)
 LANG=de_CH.utf8
 SHELL=/bin/bash
ProcVersionSignature: Ubuntu 2.6.32-23.37-generic 2.6.32.15+drm33.5
Tags: lucid
Uname: Linux 2.6.32-23-generic x86_64
UserGroups: adm admin cdrom dialout lpadmin plugdev sambashare vboxusers

tags: added: apport-collected
Revision history for this message
Janne Hyötylä (janne-hyotyla) wrote : Dependencies.txt

apport information

Revision history for this message
Peter Bauer (peba) wrote : Obtain a Uinversity Dergee based on your professional experience. business class paris

Want the deg cf ree but can’t find the ti xuv me?
WHAT A GRE abt AT ID ui EA!
We pro cm vide a co ydu ncept that will allow anyone with sufficient work experience to obtain a fully verifiable Un nm ivers pct ity Deg wc ree.
Ba ub chel nv ors, Ma hh ste zt rs or ev vw en a Do ybm cto ee rate.
Think of it, within four to six weeks, you too could be a co ttg lle jpt ge gr ixj adu qtf ate.
Many people sh hzh are the same fru thx stra wi tion, they are all doing the work of the person that has the de is gree and the person that has the d hco egree is getting all the mo zb ney.
Do not you think that it is time you were paid fair comp lls ensa hm tion for the level of work you are already doing?
This is your chance t oqa o fin djq ally make the right move and receive your due benefits.
If you are like most people, you are more than qu ym alif xei ied with your experience, but are lacking that pre hbr stig yb ious piece of paper known as a di ecd plo ff ma that is often the pas ex sp zrt ort to suc wb cess.

CA hk LL US TODAY AND GIVE YOUR WORK
EXP vib ERIE vvp NCE THE CHANCE TO EARN YOU
THE HIG tue HER CO kgc MPENS ftn ATION YOU DE cq SER tw VE!

+ 1 - 6 mqz 46 - 5 gxt 37 - 1 jk 732

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.