Can't login as ordinary user with lightdm

[j. rose]

I can't login as ordinary user rose with lightdm.
It is an Ubuntu 15.04 for armv7l .
At the beginning I saw the already reported issues with kwallet, which is not installed. I commented out the corresponding lines in. I have now:

root@odroid6:~# cat /etc/pam.d/lightdm
#%PAM-1.0
auth requisite pam_nologin.so
auth sufficient pam_succeed_if.so user ingroup nopasswdlogin
@include common-auth
auth optional pam_gnome_keyring.so
#auth optional pam_kwallet.so
@include common-account
session [success=ok ignore=ignore module_unknown=ignore default=bad] pam_selinux.so close
session required pam_limits.so
@include common-session
session [success=ok ignore=ignore module_unknown=ignore default=bad] pam_selinux.so open
session optional pam_gnome_keyring.so auto_start
#session optional pam_kwallet.so auto_start
session required pam_env.so readenv=1
session required pam_env.so readenv=1 user_readenv=1 envfile=/etc/default/locale
@include common-password

and

root@odroid6:~# cat /etc/pam.d/lightdm-greeter
#%PAM-1.0
auth required pam_permit.so
auth optional pam_gnome_keyring.so
#auth optional pam_kwallet.so
@include common-account
session [success=ok ignore=ignore module_unknown=ignore default=bad] pam_selinux.so close
session required pam_limits.so
@include common-session
session [success=ok ignore=ignore module_unknown=ignore default=bad] pam_selinux.so open
session optional pam_gnome_keyring.so auto_start
#session optional pam_kwallet.so auto_start
session required pam_env.so readenv=1
session required pam_env.so readenv=1 user_readenv=1 envfile=/etc/default/locale

It seems that my password is accepted (login via ssh works perfectly), but with lightdm I get only a black screen with mouse cursor. Login as user odroid which is in group nopasswdlogin with lightdm works.

After trying to login as user rose, I have to login with ssh and kill all processes owned by rose. At the end of /var/log/auth.log I see:

Oct 28 19:34:17 odroid6 lightdm: pam_succeed_if(lightdm:auth): requirement "user ingroup nopasswdlogin" not met by user "rose"
Oct 28 19:34:26 odroid6 lightdm: pam_unix(lightdm-greeter:session): session closed for user lightdm
Oct 28 19:34:26 odroid6 lightdm: pam_unix(lightdm:session): session opened for user rose by (uid=0)
Oct 28 19:34:26 odroid6 systemd-logind[651]: New session c8 of user rose.
Oct 28 19:34:26 odroid6 systemd: pam_unix(systemd-user:session): session opened for user rose by (uid=0)
Oct 28 19:35:10 odroid6 systemd-logind[651]: Removed session c6.
Oct 28 19:35:10 odroid6 systemd: pam_unix(systemd-user:session): session closed for user lightdm

ProblemType: Bug
DistroRelease: Ubuntu 15.04
Package: lightdm 1.14.2-0ubuntu1.1
Uname: Linux 3.10.82-57 armv7l
ApportVersion: 2.17.2-0ubuntu1.7
Architecture: armhf
Date: Fri Oct 30 18:14:21 2015
ProcEnviron:
 TERM=xterm
 PATH=(custom, no user)
 XDG_RUNTIME_DIR=<set>
 LANG=en_US.UTF-8
 SHELL=/bin/bash
SourcePackage: lightdm
UpgradeStatus: No upgrade log present (probably fresh install)
mtime.conffile..etc.pam.d.lightdm: 2015-10-28T17:40:04.609656
mtime.conffile..etc.pam.d.lightdm.greeter: 2015-10-28T17:53:38.848444

[Rose-g (rose-g)]

Also after upgrading to Ubuntu 15.10 the situation does not improved. If I login as user rose with password just after reboot, the login form disappears, I can move the mouse pointer, but I can't do any action. There is neither an application nor a mouse menu (right click to the background). I then login via ssh as user odroid. 'who' shows me that a user rose is logged in:

odroid@odroid6:~$ who
rose :0 2015-12-01 12:41 (:0)
odroid pts/1 2015-12-01 12:43 (192.168.1.81)

And /var/log/auth.log says again that the requirement "user ingroup nopasswdlogin" not met by user "rose":

odroid@odroid6:~$ tail -n 40 /var/log/auth.log
Dec 1 12:40:37 odroid6 sshd[780]: Server listening on 0.0.0.0 port 22.
Dec 1 12:40:37 odroid6 sshd[780]: Server listening on :: port 22.
Dec 1 12:40:38 odroid6 lightdm: PAM unable to dlopen(pam_kwallet.so): /lib/security/pam_kwallet.so: cannot open shared object file: No such file or directory
Dec 1 12:40:38 odroid6 lightdm: PAM adding faulty module: pam_kwallet.so
Dec 1 12:40:38 odroid6 lightdm: PAM unable to dlopen(pam_kwallet5.so): /lib/security/pam_kwallet5.so: cannot open shared object file: No such file or directory
Dec 1 12:40:38 odroid6 lightdm: PAM adding faulty module: pam_kwallet5.so
Dec 1 12:40:38 odroid6 lightdm: pam_succeed_if(lightdm:auth): requirement "user ingroup nopasswdlogin" not met by user "rose"
Dec 1 12:40:58 odroid6 dbus[767]: [system] Failed to activate service 'org.bluez': timed out
Dec 1 12:41:14 odroid6 lightdm: pam_unix(lightdm-greeter:session): session closed for user lightdm
Dec 1 12:41:14 odroid6 lightdm: pam_unix(lightdm:session): session opened for user rose by (uid=0)
Dec 1 12:41:14 odroid6 systemd-logind[730]: New session c2 of user rose.
Dec 1 12:41:14 odroid6 systemd: pam_unix(systemd-user:session): session opened for user rose by (uid=0)
Dec 1 12:42:33 odroid6 systemd-logind[730]: Removed session c1.
Dec 1 12:42:33 odroid6 systemd: pam_unix(systemd-user:session): session closed for user lightdm
Dec 1 12:43:14 odroid6 sshd[1550]: Accepted password for odroid from 192.168.1.81 port 52770 ssh2
Dec 1 12:43:14 odroid6 sshd[1550]: pam_unix(sshd:session): session opened for user odroid by (uid=0)
Dec 1 12:43:14 odroid6 systemd-logind[730]: New session c3 of user odroid.
Dec 1 12:43:14 odroid6 systemd: pam_unix(systemd-user:session): session opened for user odroid by (uid=0)
Dec 1 12:45:31 odroid6 su[1795]: Successful su for nobody by root
Dec 1 12:45:31 odroid6 su[1795]: + ??? root:nobody
Dec 1 12:45:31 odroid6 su[1795]: pam_unix(su:session): session opened for user nobody by (uid=0)
Dec 1 12:45:31 odroid6 systemd-logind[730]: New session c4 of user nobody.
Dec 1 12:45:31 odroid6 systemd: pam_unix(systemd-user:session): session opened for user nobody by (uid=0)
Dec 1 12:45:32 odroid6 su[1795]: pam_unix(su:session): session closed for user nobody
Dec 1 12:45:32 odroid6 systemd-logind[730]: Removed session c4.
Dec 1 12:45:32 odroid6 su[1821]: Successful su for nobody by root
Dec 1 12:45:32 odroid6 su[1821]: + ??? root:nobody
Dec 1 12:45:32 odroid6 su[1821]: pam_unix(su:session): session opened for user nobody by (uid=0)
Dec 1 12:45:32 odroid6...

[Rose-g (rose-g)]

BTW., /lib/security/pam_kwallet5.so is not yet installed and following processes owned by rose are running:

odroid@odroid6:~$ ps -ef | grep rose
rose 1371 1 0 12:41 ? 00:00:00 /lib/systemd/systemd --user
rose 1376 1371 0 12:41 ? 00:00:00 (sd-pam)
rose 1381 1 0 12:41 ? 00:00:00 /usr/bin/gnome-keyring-daemon --daemonize --login
rose 1385 1235 0 12:41 ? 00:00:00 /sbin/upstart --user
rose 1450 1385 0 12:41 ? 00:00:00 upstart-udev-bridge --daemon --user
rose 1453 1385 0 12:41 ? 00:00:00 dbus-daemon --fork --session --address=unix:abstract=/tmp/dbus-3wDUb833SU
rose 1518 1385 0 12:41 ? 00:00:00 upstart-file-bridge --daemon --user
rose 1520 1385 0 12:41 ? 00:00:00 upstart-dbus-bridge --daemon --system --user --bus-name system
rose 1522 1385 0 12:41 ? 00:00:00 upstart-dbus-bridge --daemon --session --user --bus-name session
odroid 1982 1633 0 12:55 pts/1 00:00:00 grep --color=auto rose
odroid@odroid6:~$ ll /lib/security/pam_kwallet5.so
ls: cannot access /lib/security/pam_kwallet5.so: No such file or directory
odroid@odroid6:~$

[Rose-g (rose-g)]

I posted this issue also to tho Odroid forum:

http://forum.odroid.com/viewtopic.php?f=95&t=17699

It seems that they found a solution.

[Launchpad Janitor (janitor)]

Status changed to 'Confirmed' because the bug affects multiple users.

[Akshay Jain (akj-1989)]

I am getting the same problem with a fresh install of Ubuntu 16.04 LTS.
Tried the workarounds from odroid forum, but doesn't seem to help.
Is this bug going to be fixed?

[Adumont (adumont)]

Same bug here, Ubuntu 16.04.1 LTS.

[Walt Mankowski (waltman)]

I'm seeing the same thing in 16.10, with kernel 4.0.8-34 that just hit yesterday. When I boot from the previous kernel (4.0.8-32) I can still login.

[Walt Mankowski (waltman)]

Sorry, that should be 4.8.0-34 and 4.8.0-32.

[Walt Mankowski (waltman)]

I figured out what my problem was, and since I haven't seen any solutions anywhere else, hopefully this will be of some use to the next person. In my case it turned out to be the Nvidia driver, which installed its modules under /lib/modules/4.8.0-32-generic. When I upgraded to 4.8.0-34, it couldn't find the drivers. See https://ubuntuforums.org/showthread.php?t=2349132 for more information.

Of course this doesn't explain why it was looking for pam_kwallet.so, which I suspect is a separate issue.

[George Vasileiou (gvasileiou)]

I had the same problem in elementary OS Loki. The same messages as it is described above. Those bug was affecting my login time in the pantheon graphical environment so I came out with a very quickie work - arround. I edited and I delete the lines which have pam_kwallet.so and pam_kwallet5.so. Make a backup before you try it.

/etc/pam.d/lightdm

#%PAM-1.0
auth requisite pam_nologin.so
auth sufficient pam_succeed_if.so user ingroup nopasswdlogin
@include common-auth
auth optional pam_gnome_keyring.so
auth optional pam_kwallet.so
auth optional pam_kwallet5.so
@include common-account
session [success=ok ignore=ignore module_unknown=ignore default=bad] pam_selinux.so close
#session required pam_loginuid.so
session required pam_limits.so
@include common-session
session [success=ok ignore=ignore module_unknown=ignore default=bad] pam_selinux.so open
session optional pam_gnome_keyring.so auto_start
session optional pam_kwallet.so auto_start
session optional pam_kwallet5.so auto_start
session required pam_env.so readenv=1
session required pam_env.so readenv=1 user_readenv=1 envfile=/etc/default/locale
@include common-password

/etc/pam.d/lightdm-greeter
#%PAM-1.0
auth required pam_permit.so
auth optional pam_gnome_keyring.so
auth optional pam_kwallet.so
auth optional pam_kwallet5.so
@include common-account
session [success=ok ignore=ignore module_unknown=ignore default=bad] pam_selinux.so close
session required pam_limits.so
@include common-session
session [success=ok ignore=ignore module_unknown=ignore default=bad] pam_selinux.so open
session optional pam_gnome_keyring.so auto_start
session optional pam_kwallet.so auto_start
session optional pam_kwallet5.so auto_start
session required pam_env.so readenv=1
session required pam_env.so readenv=1 user_readenv=1 envfile=/etc/default/locale