lightdm does not ask for a password when using sssd
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
lightdm (Ubuntu) |
Confirmed
|
Undecided
|
Unassigned |
Bug Description
1) the release is Quantal (12.10)
2) the package version
lightdm:
Installed: 1.4.0-0ubuntu2
sssd:
Installed: 1.9.1-0ubuntu1
3) Lightdm should ask for my password when i goto login.
4) lightdm does not prompt for password for network users
I have been using SSSD to allow authentication to our AD server.
My configuration works on all prior versions of ubuntu at least back to 10.04.
This only happens when using gui from command line I am able to login as the user and it prompts for a password.
Under user accounts for the network user the option for Automatic Login is set to off
Command line login works correctly this is only a problem from the gui login page
To recreate this issue:
1.) install 12.10
2.) install packages ntp sssd libnss-sss libpam-sss krb5-user
3.) configure sssd example below
4.) verify that sfu has been setup on AD server and user has been configured with a uid
5.) put your AD cert in the directory supplied
6.) Login as network user from command line to verify sssd is working correctly
7.) reboot and click on network user in lightdm
8.) click login (notice no password prompt)
SSSD EXAMPLE
[sssd]
config_file_version = 2
reconnection_
sbus_timeout = 30
services = nss, pam
domains = example.com
[nss]
filter_groups = root
filter_users = root
reconnection_
[pam]
reconnection_
debug_level = 3
[domain/
enumerate = true
min_id = 1
id_provider = ldap
ldap_uri = ldaps:/
ldap_user_
ldap_group_
ldap_default_
ldap_default_
ldap_default_
ldap_user_
ldap_user_name = sAMAccountName
ldap_user_
ldap_user_
ldap_user_
ldap_user_shell = loginShell
ldap_user_principal = userPrincipalName
ldap_user_member = msSFU30PosixMem
ldap_group_
ldap_group_name = sAMAccountName
ldap_group_
ldap_group_member = member
ldap_tls_cacertdir = /etc/ssl/certs/
ldap_tls_cacert = /etc/ssl/
[domain/
ldap_id_
cache_credentials = True
id_provider = ldap
auth_provider = krb5
chpass_provider = krb5
debug_level = 3
ldap_schema = rfc2307bis
ldap_force_
krb5_realm = example.com
ldap_search_base = DC=example,DC=com
ldap_uri = ldaps:/
krb5_kpasswd = DC1.example.com
krb5_kdcip = DC1.example.com
ldap_tls_cacertdir = /etc/ssl/certs/
ldap_tls_cacert = /etc/ssl/
ProblemType: Bug
DistroRelease: Ubuntu 12.10
Package: lightdm 1.4.0-0ubuntu2
ProcVersionSign
Uname: Linux 3.5.0-17-generic x86_64
NonfreeKernelMo
ApportVersion: 2.6.1-0ubuntu6
Architecture: amd64
Date: Wed Nov 21 14:37:37 2012
InstallationDate: Installed on 2012-11-21 (0 days ago)
InstallationMedia: Ubuntu 12.10 "Quantal Quetzal" - Release amd64 (20121017.5)
MarkForUpload: True
ProcEnviron:
PATH=(custom, no user)
XDG_RUNTIME_
LANG=en_US.UTF-8
SHELL=/bin/bash
SourcePackage: lightdm
UpgradeStatus: No upgrade log present (probably fresh install)
information type: | Private Security → Public |
information type: | Public → Public Security |
Status changed to 'Confirmed' because the bug affects multiple users.