Comment 6 for bug 1706770

Revision history for this message
Chris Gavin (chrisgavin) wrote : Re: Lock screen can be bypassed when auto-login is enabled.

If it helps, I've reproduced this in a fresh Ubuntu Mate virtual machine.

1. Install Ubuntu Mate following all the usual steps until you get to the account creation screen.
2. Create a user account with a password and leave "require password at login" checked.
3. Finish installation and reboot.
4. Go to "System" -> "Administration" -> "Users and Groups".
5. Change password from "Asked on logon" to "Not asked on logon".
6. Lock your machine.
7. Press "Switch User".
8. Observe no password is required to unlock as the current user.

For some reason, the problem doesn't happen when you set your account to not require a password at installation. Even more oddly, the user account still shows "Asked on logon" for the user created at installation, even though the option to not require a password was checked, and seems to be effective at boot. I guess they must just be implemented in different ways.