| 2012-12-04 07:28:01 |
Timo Aaltonen |
bug |
|
|
added bug |
| 2012-12-04 07:29:07 |
Timo Aaltonen |
description |
The priority of the libpam-sss pam-auth-update config file needs to be lower than for pam_unix, so that local users always work, despite the state of the sssd daemon. This causes a problem with the password stack, where pam_sss needs to be above pam_unix, so that if pam_cracklib is installed password changes still work. Otherwise it would be broken in one of the cases, depending on if use_authtok is set or not.
This is fixed in raring, needs an SRU to precise and quantal. |
The priority of the libpam-sss pam-auth-update config file needs to be lower than for pam_unix, so that local users always work, despite the state of the sssd daemon. This causes a problem with the password stack, where pam_sss needs to be above pam_unix, so that if pam_cracklib is installed password changes still work. Otherwise it would be broken in one of the cases, depending on if use_authtok is set or not.
The fix for this is to split the password stack from pam_sss config separate from the rest, and use a higher priority there.
This is fixed in raring, needs an SRU to precise and quantal. |
|
| 2012-12-04 07:29:16 |
Timo Aaltonen |
nominated for series |
|
Ubuntu Precise |
|
| 2012-12-04 07:29:16 |
Timo Aaltonen |
bug task added |
|
sssd (Ubuntu Precise) |
|
| 2012-12-04 07:29:16 |
Timo Aaltonen |
nominated for series |
|
Ubuntu Quantal |
|
| 2012-12-04 07:29:16 |
Timo Aaltonen |
bug task added |
|
sssd (Ubuntu Quantal) |
|
| 2012-12-04 07:29:24 |
Timo Aaltonen |
sssd (Ubuntu): status |
New |
Fix Released |
|
| 2012-12-04 07:29:36 |
Timo Aaltonen |
sssd (Ubuntu Precise): importance |
Undecided |
Medium |
|
| 2012-12-04 07:29:36 |
Timo Aaltonen |
sssd (Ubuntu Precise): status |
New |
In Progress |
|
| 2012-12-04 07:29:49 |
Timo Aaltonen |
sssd (Ubuntu Quantal): importance |
Undecided |
Medium |
|
| 2012-12-04 07:29:49 |
Timo Aaltonen |
sssd (Ubuntu Quantal): status |
New |
In Progress |
|
| 2012-12-04 07:45:34 |
Timo Aaltonen |
description |
The priority of the libpam-sss pam-auth-update config file needs to be lower than for pam_unix, so that local users always work, despite the state of the sssd daemon. This causes a problem with the password stack, where pam_sss needs to be above pam_unix, so that if pam_cracklib is installed password changes still work. Otherwise it would be broken in one of the cases, depending on if use_authtok is set or not.
The fix for this is to split the password stack from pam_sss config separate from the rest, and use a higher priority there.
This is fixed in raring, needs an SRU to precise and quantal. |
[Impact]
password changes don't currently work unless pam_cracklib is installed, or the use_authtok is dropped from the libpam-sss pam-auth-update file.
[Test case]
install sssd & libpam-sss on an LDAP client, then try to change the password of a networked user.
[Regression potential]
This bug has basically forced users to modify the (package owned) file on their own, but the new version should still work in all cases.
--
The priority of the libpam-sss pam-auth-update config file needs to be lower than for pam_unix, so that local users always work, despite the state of the sssd daemon. This causes a problem with the password stack, where pam_sss needs to be above pam_unix, so that if pam_cracklib is installed password changes still work. Otherwise it would be broken in one of the cases, depending on if use_authtok is set or not.
The fix for this is to split the password stack from pam_sss config separate from the rest, and use a higher priority there.
This is fixed in raring, needs an SRU to precise and quantal. |
|
| 2012-12-04 08:43:09 |
Timo Aaltonen |
bug |
|
|
added subscriber Ubuntu Stable Release Updates Team |
| 2013-01-03 14:28:17 |
Patrick Hemmer |
bug |
|
|
added subscriber Patrick Hemmer |
| 2013-01-30 23:49:53 |
Adam Conrad |
sssd (Ubuntu Precise): status |
In Progress |
Fix Committed |
|
| 2013-01-30 23:49:57 |
Adam Conrad |
bug |
|
|
added subscriber SRU Verification |
| 2013-01-30 23:50:03 |
Adam Conrad |
tags |
|
verification-needed |
|
| 2013-01-30 23:51:47 |
Adam Conrad |
sssd (Ubuntu Quantal): status |
In Progress |
Fix Committed |
|
| 2013-02-05 22:30:23 |
Timo Aaltonen |
sssd (Ubuntu Precise): status |
Fix Committed |
In Progress |
|
| 2013-02-05 22:31:01 |
Timo Aaltonen |
sssd (Ubuntu Quantal): status |
Fix Committed |
In Progress |
|
| 2013-02-05 22:31:13 |
Timo Aaltonen |
tags |
verification-needed |
verification-failed |
|
| 2013-02-05 22:31:26 |
Timo Aaltonen |
sssd (Ubuntu): assignee |
|
Timo Aaltonen (tjaalton) |
|
| 2013-02-05 22:46:13 |
Timo Aaltonen |
sssd (Ubuntu): status |
Fix Released |
Fix Committed |
|
| 2013-02-08 19:44:49 |
Adam Conrad |
sssd (Ubuntu Precise): status |
In Progress |
Fix Committed |
|
| 2013-02-08 19:44:55 |
Adam Conrad |
tags |
verification-failed |
|
|
| 2013-02-08 19:44:56 |
Adam Conrad |
tags |
|
verification-needed |
|
| 2013-02-08 19:45:23 |
Adam Conrad |
sssd (Ubuntu Quantal): status |
In Progress |
Fix Committed |
|
| 2013-02-11 01:25:15 |
Launchpad Janitor |
sssd (Ubuntu): status |
Fix Committed |
Fix Released |
|
| 2013-02-27 16:29:21 |
Timo Aaltonen |
tags |
verification-needed |
verification-done |
|
| 2013-03-12 03:16:01 |
Scott Kitterman |
removed subscriber Ubuntu Stable Release Updates Team |
|
|
|
| 2013-03-12 03:16:11 |
Launchpad Janitor |
sssd (Ubuntu Quantal): status |
Fix Committed |
Fix Released |
|
| 2013-03-13 04:45:17 |
Launchpad Janitor |
sssd (Ubuntu Precise): status |
Fix Committed |
Fix Released |
|
