Recent update to kallet pam prevents groups from being set correctly via lightdm
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
pam-kwallet (Ubuntu) |
New
|
Undecided
|
Unassigned |
Bug Description
It appears a recent update to Pam KWallet has resulted in groups not being set correctly when logging into my Ubuntu 16.04 system.
$ lsb_release -rd
Description: Ubuntu 16.04.5 LTS
Release: 16.04
$ apt-cache policy libpam-kwallet5
libpam-kwallet5:
Installed: 4:5.5.5-0ubuntu1.3
Candidate: 4:5.5.5-0ubuntu1.3
Version table:
*** 4:5.5.5-0ubuntu1.3 500
500 http://
500 http://
100 /var/lib/
4:
500 http://
Expected Results:
Upon login to gnome3 shell within a terminal started I should be able to see all of my domain groups (via Winbind/Samba) and local groups when I run 'groups'
Actual Results:
I only see my default group returned
Other info:
On my broken system, performing 'cat /proc/$$/status' to inspect groups, and then replacing the '$$' with the value from ppid, I trace upwards 'bash' -> 'gnome-terminal-' -> 'upstart' -> 'lightdm' -> 'lightdm'
I discover that the parent 'lightdm' contains all of groups, but the child 'lightdm' is empty.
On a working system, the 'lightdm' parent process has it's groups empty, while the child 'lightdm' process contains all of the expected groups as do all of the subsequent child processes.
Testing login via console (Alt + F1) results in groups being set correctly, as does login over SSH, so it appears to be an issue between lightdm and kwallet.
Looking around the internet I found https:/