Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
Xscreensaver fails password [SOLVED]
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index Networking & Security
View previous topic :: View next topic  
Author Message
binro
l33t
l33t


Joined: 06 May 2005
Posts: 724
Location: Bangkok, Thailand

PostPosted: Fri Jun 18, 2021 4:46 pm    Post subject: Xscreensaver fails password [SOLVED] Reply with quote

After porting an existing system to a new box the screen-saver won't let me log back on to my session. I thought it was a bug in version 5.45 but I have just upgraded to V6.0 and I get the same problem. The system is identical to the old one except for the host name and, AFAICT, Xscreensaver doesn't use that. You can circumvent the problem by doing C-A-F1 to a console and killing xscreensaver, which makes it a bit useless from a security point of view! In the security log I see:


    Jun 18 23:02:49 localhost unix_chkpwd[23824] check pass; user unknown
    Jun 18 23:02:58 localhost unix_chkpwd[25282] check pass; user unknown
    Jun 18 23:02:58 localhost unix_chkpwd[25282] password check failed for user (robin)
    Jun 18 23:02:58 localhost xscreensaver-auth pam_unix(xscreensaver:auth): authentication failure;
    logname= uid=1000 euid=1000 tty=:0 ruser= rhost= user=robin
    Jun 18 23:03:00 localhost xscreensaver-auth[23823] Failed login on display ":0" for "robin"

Any ideas?

Thanks
_________________
"Ship me somewheres east of Suez, where the best is like the worst,
Where there ain't no Ten Commandments an' a man can raise a thirst"
from "Mandalay" by Rudyard Kipling


Last edited by binro on Sat Jun 19, 2021 6:53 pm; edited 1 time in total
Back to top
View user's profile Send private message
alamahant
Advocate
Advocate


Joined: 23 Mar 2019
Posts: 3879

PostPosted: Fri Jun 18, 2021 4:57 pm    Post subject: Reply with quote

Maybe try
Code:

equery u xscreensaver
cat /etc/pam.d/<something-xscreensaver>

_________________
:)
Back to top
View user's profile Send private message
Hu
Moderator
Moderator


Joined: 06 Mar 2007
Posts: 21633

PostPosted: Fri Jun 18, 2021 6:15 pm    Post subject: Reply with quote

How exactly did you create the new system? We somewhat routinely see people make imperfect copies, and the bits that get lost (such as suid/xattr) show up as authentication problems.
Back to top
View user's profile Send private message
binro
l33t
l33t


Joined: 06 May 2005
Posts: 724
Location: Bangkok, Thailand

PostPosted: Fri Jun 18, 2021 7:06 pm    Post subject: Reply with quote

alamahant wrote:
Maybe try
Code:

equery u xscreensaver
cat /etc/pam.d/<something-xscreensaver>

Code:

# cat /etc/pam.d/xscreensaver
# File autogenerated by pamd_mimic in pam eclass


auth    substack                system-auth

Exactly the same as the old system. :?
_________________
"Ship me somewheres east of Suez, where the best is like the worst,
Where there ain't no Ten Commandments an' a man can raise a thirst"
from "Mandalay" by Rudyard Kipling
Back to top
View user's profile Send private message
binro
l33t
l33t


Joined: 06 May 2005
Posts: 724
Location: Bangkok, Thailand

PostPosted: Fri Jun 18, 2021 7:08 pm    Post subject: Reply with quote

Hu wrote:
How exactly did you create the new system? We somewhat routinely see people make imperfect copies, and the bits that get lost (such as suid/xattr) show up as authentication problems.

With "rsync -avz <old> <new>". I was very careful. And I just installed a fresh copy. It's very strange. Everything else seems to work as expected.
_________________
"Ship me somewheres east of Suez, where the best is like the worst,
Where there ain't no Ten Commandments an' a man can raise a thirst"
from "Mandalay" by Rudyard Kipling
Back to top
View user's profile Send private message
alamahant
Advocate
Advocate


Joined: 23 Mar 2019
Posts: 3879

PostPosted: Fri Jun 18, 2021 7:10 pm    Post subject: Reply with quote

You need
Code:

rsync -aAXv (--delete) <old>/ <new>/

X for extended attributes
A for acls

If <old> is running you need --exclude
Code:


rsync -aAXv --delete --exclude={"/dev/*","/proc/*","/sys/*","/tmp/*","/run/*","/mnt/*","/media/*","/lost+found"} <old>/ <new>/

_________________
:)
Back to top
View user's profile Send private message
binro
l33t
l33t


Joined: 06 May 2005
Posts: 724
Location: Bangkok, Thailand

PostPosted: Fri Jun 18, 2021 8:58 pm    Post subject: Reply with quote

Thanks for the rsync parameters. I am going to have to find the moral fibre to repeat the migration when almost everything works OK. :D
_________________
"Ship me somewheres east of Suez, where the best is like the worst,
Where there ain't no Ten Commandments an' a man can raise a thirst"
from "Mandalay" by Rudyard Kipling
Back to top
View user's profile Send private message
alamahant
Advocate
Advocate


Joined: 23 Mar 2019
Posts: 3879

PostPosted: Fri Jun 18, 2021 9:05 pm    Post subject: Reply with quote

You dont have to repeat it.
Just re rsync it with the above parameters.
--delete will delete any files in <new> not present in <old>.
Do you want that?
_________________
:)
Back to top
View user's profile Send private message
Hu
Moderator
Moderator


Joined: 06 Mar 2007
Posts: 21633

PostPosted: Fri Jun 18, 2021 9:50 pm    Post subject: Reply with quote

If I am right, you could also fix this by reinstalling the package(s) for which the xattrs/ACLs were lost, since Portage should set them properly at install time. Start with xscreensaver and pam.
Back to top
View user's profile Send private message
binro
l33t
l33t


Joined: 06 May 2005
Posts: 724
Location: Bangkok, Thailand

PostPosted: Sat Jun 19, 2021 6:52 pm    Post subject: Reply with quote

Ok, reinstalling pam fixed it. :) If I get any more weirdness I guess that's the solution.

Thanks to all.
_________________
"Ship me somewheres east of Suez, where the best is like the worst,
Where there ain't no Ten Commandments an' a man can raise a thirst"
from "Mandalay" by Rudyard Kipling
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Networking & Security All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum