[Usability/Security] Inconsistency in password handling during login and session. A problem related to languge settings.

Bug #150894 reported by Anders Hall
12
Affects Status Importance Assigned to Milestone
xorg (Ubuntu)
Invalid
Undecided
Unassigned

Bug Description

Often during dist. upgrade, new releases and Gnome updates the language settings breaks password handling. This report relates to all Ubuntu versions (at minimum; dating back to version 5).

* Often the keyboard language and default language is reset to US English at login prompt - even if the default setting is Swedish, Russian, Dutch etc.

* Often the login system resets the keyboard language and default language to English US while in session - even if the default setting is Swedish, Russian, Dutch etc.

* The first seconds while logging in it is not possible to use Ubuntu in your native language unless you are English (especially on older hardware).

Use-case: I'm Swedish and use Swedish language as default. I use a Swedish keyboard. During updates the keyboard language is reset; then my login password will be rejected because I type with a different keyboard layout or with a different default language compared to settings made during installation.

* Changing session language will not help at login (often that setting wont even set language in session correctly).

Problem: At times it can be very hard to find the right keys if you use odd characters (and so on) and reasonably long passwords. I’ve learned the English US keyboard; however, novel users might not know what is causing the problem. The length it takes to access the computer in such case can be very long (and cost money).
  If you use odd combinations like I do; Swedish/English computer (it actually looks different and have different keyboard keys) with Swedish and several others keyboard languages in Ubuntu as options + several different languages installed - then it can get really messy.

Severity: In some cases (i.e. 3 years ago when it happened first) it was faster to reinstall Ubuntu than figure out how to put in long passwords. The target group for Ubuntu would probably scrap the project all together and would not bother to learn another keyboard setting (if they at all found the problem).

Solution: Add keyboard indicator at login prompt and language indicator at login prompt. Most important inform responsible developers that this is a Security bug (of sort). Upgrades should also be tested in more languages and language settings should be honoured.
  Also add keyboard and language indicator when screen saver activates if password is used. Always inform the user how to change keyboard language and default language at login or when screensaver is active (e.g. “use Alt + Alt”).

* This problem also relates to login with command prompt (which has no language indicators at all).

Revision history for this message
Anders Hall (kallebolle) wrote :

This might be a related bug for feisty: #109036

Revision history for this message
Anders Hall (kallebolle) wrote :

#109036 - Its Probably not related (just read the headline)

Revision history for this message
Anders Hall (kallebolle) wrote :

Related bug: Bug #46046

Revision history for this message
Anders Hall (kallebolle) wrote :

Tested some more since this happen almost with all the latest updates for Gutsy:

* Does not matter if i set language for login setting at the login window to Swedish, the keyboard mapping is still wrong.

One thing i notices was that after successful login (with US keyboard mapping on a Swedish keyboard) the default language is US for a while and then it changes back to Swedish since i set it at login promt. The setting done at login must apply while login in, not after.

Just to make this clear. We have different letters and keyboards with different characters (imagine the problem Chinese who have a completely different language will have).

And the keyboard indicator is completely missing from the login screen (both keyboard and language should be notified to the user with icons).

The screen saver problem is worse since you might be typing in one of many languages and then you go watch TV and login next day (and perhaps have no idea what language you were using - plus perhaps you haven't memorised the entire keyboard layout, again regarding odd characters).

Revision history for this message
Anders Hall (kallebolle) wrote :

This problem is still present in the latest Gutsy release (close to release finished version).

Additionally, I cant find any graphical front-end to configuring login language. That means, as a regular user, once the language have defaulted back to US English i cant change it back to Swedish... meaning i will need to continue typing with a English keyboard at login.

After contemplating the login procedure i find it odd that my session language always start of with US English keyboard and at the end of login reverts to my setting. That means, except for the login problem, that i cant use my computer for typing those first seconds. Shouldn't the keyboard and language directly switch to my setting (meaning before i can use the desktop and programs).

This problem is also relative to command line tools and command line use of Ubuntu. What indicator do i have regarding language in promt session?

Revision history for this message
Konstantin Maslov (conma) wrote :

Small addition.
I use Russian language and English keyboard by default, russian keyboard as a second. And I use user names and passwords in english course many programs and services don't want cyrillic names.

Imagine, I install Gutsy from zero, choose Russian keyboard layout, enter login and password in english, when installation process is over I reboot, and I get Russian login screen with russian keyboard! But my login and password are in english! No way to change keyboard layout, no way to login. I must set English keyboard when install and add rusian layout just after. Or, I can go to text console and edit xorg.xonf :)

It is not intuitive and not good at all. I'd preffer to configure all keyboard layouts I need when I setup my system, not after. It can be great trouble for novice user.

Solution: allow users to configure all keyboard layouts thay need from setup program or just add chechbox "Add English layout as default" on keyboard layout configure screen.

Revision history for this message
Anders Hall (kallebolle) wrote :

Related: 23475

Revision history for this message
Anders Hall (kallebolle) wrote :

Sorry: Bug #23475

Revision history for this message
Anders Hall (kallebolle) wrote :

The issue with language notification when screen saver activates (regarding password) is partially resolved. However, the user also need information on how to change language before entering a password. In my case I use the Alt + Alt command - though its not obvious what command is present at the system at hand.

Revision history for this message
Anders Hall (kallebolle) wrote :

These problems are still present in Ubuntu 8!

Revision history for this message
Michael Nagel (nailor) wrote :

marking xorg as affected, perhaps one of the guys over there can have a look at it...

Revision history for this message
Anders Hall (kallebolle) wrote :

I made the description slightly more informative and corrected numerous spelling mistakes.

description: updated
Revision history for this message
Bryce Harrington (bryce) wrote :

Please attach the output of `lspci -vvnn`, and attach your /var/log/Xorg.0.log file from after reproducing this issue. If you've made any customizations to your /etc/X11/xorg.conf please attach that as well.

Changed in xorg:
status: New → Incomplete
Revision history for this message
Bryce Harrington (bryce) wrote :

We're closing this bug since it is has been some time with no response from the original reporter. However, if the issue still exists please feel free to reopen with the requested information. Also, if you could, please test against the latest development version of Ubuntu, since this confirms the bug is one we may be able to pass upstream for help.

Changed in xorg:
status: Incomplete → Invalid
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.