GDM3 completely ignore pam_group

Bug #1777318 reported by Marco Gaiarin
10
This bug affects 2 people
Affects Status Importance Assigned to Milestone
gdm3 (Ubuntu)
Confirmed
Undecided
Unassigned

Bug Description

https://gitlab.gnome.org/GNOME/gdm/issues/393

---

I'm using some ubuntu machine in a network where users data came from LDAP.

I've setup PAM/NSS to use LDAP account and all works as expected.
Apart assigning local group to users, via pam_group.

I've added to /etc/pam.d/common-auth (to the end):
 auth optional pam_group.so

and added to /etc/security/group.conf:
 *; *; %sysops; Al0000-2400; adm,sudo,admin,dip,cdrom,floppy,plugdev,lpadmin,sambashare

but groups are not added as expected, i'm not in 'admin' or 'sudo' group (eg, i cannot do administrative tasks) and if i fire up a terminal:

 gaio@dora:~$ id
 uid=1000(gaio) gid=1001(casa) gruppi=1001(casa),1000(sysops),1003(bbs)

note that group assignment works, eg:

 gaio@dora:~$ ssh localhost
 gaio@localhost's password:
 Welcome to Ubuntu 18.04 LTS (GNU/Linux 4.15.0-23-generic x86_64)

 * Documentation: https://help.ubuntu.com
 * Management: https://landscape.canonical.com
 * Support: https://ubuntu.com/advantage

 * Canonical Livepatch is available for installation.
   - Reduce system reboots and improve kernel security. Activate at:
     https://ubuntu.com/livepatch

 0 pacchetti possono essere aggiornati.
 0 sono aggiornamenti di sicurezza.

 Last login: Sun Jun 17 14:36:50 2018 from 127.0.0.1
 gaio@dora:~$ id
 uid=1000(gaio) gid=1001(casa) gruppi=1001(casa),4(adm),24(cdrom),25(floppy),27(sudo),30(dip),46(plugdev),116(lpadmin),126(sambashare),1000(sysops),1003(bbs)

Previous LTS (16.04) with LightDM works as expected. This bug seems very similar to #880104 .

Thanks.

Revision history for this message
Daniel van Vugt (vanvugt) wrote :

Please report the issue to the GDM developers here:
https://gitlab.gnome.org/GNOME/gdm/issues

and then tell us the ID of the new bug.

Changed in gdm3 (Ubuntu):
status: New → Incomplete
Revision history for this message
Marco Gaiarin (marcogaio) wrote :
description: updated
Changed in gdm3 (Ubuntu):
status: Incomplete → New
Revision history for this message
Launchpad Janitor (janitor) wrote :

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in gdm3 (Ubuntu):
status: New → Confirmed
Revision history for this message
Daniel van Vugt (vanvugt) wrote :

This wouldn't be a side-effect of bug 1782152, would it?

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.