[users] Changing password ask for password where it shouldn't, then ignore denied requests

Bug #1293705 reported by Vasil Yakauleu
10
This bug affects 2 people
Affects Status Importance Assigned to Milestone
unity-control-center (Ubuntu)
Fix Released
High
Unassigned

Bug Description

Ubuntu 14.04 Fresh install of daily build iso of 9March2014 + updates. Reproducible in VM and on real machine

Issue-2: User promted to enter password and can proceed successfully without entering password. See steps below:
1. Navigate to the System Settings
2. Choose User Accounts
3. Click on Password field to change user password (without unlocking)
4. Enter correctly old password and New password (make sure you know it and can remember for later use) and Confirmation for new password and click "Change" button again
!!!On the next step your password will be changed to the new one entered abowe
5. When asked for password click cancel and do not enter your current password
Actual result:
5. User was asked for password, but proceed successfully without entering password

ProblemType: Bug
DistroRelease: Ubuntu 14.04
Package: unity-control-center 14.04.3+14.04.20140310-0ubuntu1
ProcVersionSignature: Ubuntu 3.13.0-16.36-generic 3.13.5
Uname: Linux 3.13.0-16-generic i686
ApportVersion: 2.13.3-0ubuntu1
Architecture: i386
CurrentDesktop: Unity
Date: Tue Mar 11 14:00:51 2014
ExecutablePath: /usr/bin/unity-control-center
InstallationDate: Installed on 2014-03-10 (1 days ago)
InstallationMedia: Ubuntu 14.04 LTS "Trusty Tahr" - Alpha i386 (20140309)
SourcePackage: unity-control-center
UpgradeStatus: No upgrade log present (probably fresh install)
usr_lib_unity-control-center:
 activity-log-manager 0.9.7-0ubuntu10
 deja-dup 29.5-0ubuntu2

Related branches

Revision history for this message
Launchpad Janitor (janitor) wrote :

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in unity-control-center (Ubuntu):
status: New → Confirmed
Revision history for this message
Quinn Balazs (qbalazs) wrote :

Duplicable in 15March2014 as well.

Revision history for this message
Sebastien Bacher (seb128) wrote :

Thanks for your bug report, the request is an org.freedesktop.accounts.user-administration one, the issue could be with accountsservice there

summary: - System settings>ChangePassword. User was asked for password, but proceed
- successfully without entering password at all
+ Changing password ask for password where it shouldn't, then ignore
+ denied requests
Changed in unity-control-center (Ubuntu):
importance: Undecided → High
summary: - Changing password ask for password where it shouldn't, then ignore
- denied requests
+ [users] Changing password ask for password where it shouldn't, then
+ ignore denied requests
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package unity-control-center - 14.04.3+14.04.20140319-0ubuntu1

---------------
unity-control-center (14.04.3+14.04.20140319-0ubuntu1) trusty; urgency=low

  [ Sebastien Bacher ]
  * users: set the change password button to inactive by default (LP:
    #1290808)
  * users: don't make accountsservice calls when not needed (LP:
    #1293705)
  * users: don't display the ecryptfs-verify output on stdout

unity-control-center (14.04.3+14.04.20140317-0ubuntu2) trusty; urgency=low

  * Disable the input/output bar when no input/output devices (LP: #1291862)
 -- Ubuntu daily release <email address hidden> Wed, 19 Mar 2014 14:43:40 +0000

Changed in unity-control-center (Ubuntu):
status: Confirmed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.