Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
[SOLVED] xscreensaver fails to unlock with correct password
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index Desktop Environments
View previous topic :: View next topic  
Author Message
pneula
n00b
n00b


Joined: 16 Jan 2009
Posts: 37

PostPosted: Thu Nov 05, 2015 12:46 pm    Post subject: [SOLVED] xscreensaver fails to unlock with correct password Reply with quote

Hi all

Just today, my xscreensaver stopped to let me in with my correct password. Debian users have faced the same issue and solved it using shadow group (https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=663227).

The problem is that I do not have the shadow group at all. How could I get my xscreensaver usable again?

Please ask for any additional info you might need for the solution.


Last edited by pneula on Thu Nov 05, 2015 5:20 pm; edited 1 time in total
Back to top
View user's profile Send private message
frostschutz
Advocate
Advocate


Joined: 22 Feb 2005
Posts: 2968
Location: Germany

PostPosted: Thu Nov 05, 2015 1:10 pm    Post subject: Reply with quote

xscreensaver has some use flags, which ones are you using / which ones have you tried?
Back to top
View user's profile Send private message
pneula
n00b
n00b


Joined: 16 Jan 2009
Posts: 37

PostPosted: Thu Nov 05, 2015 3:57 pm    Post subject: Reply with quote

Thanks for the hint frostschutz!

Disabling PAM made unlocking work again. However, I guess xscreensaver should work with PAM, shouldn't it?
Back to top
View user's profile Send private message
Roman_Gruber
Advocate
Advocate


Joined: 03 Oct 2006
Posts: 3806
Location: Austro Bavaria

PostPosted: Thu Nov 05, 2015 4:13 pm    Post subject: Reply with quote

May i ask how you build your xscreensaver?

This is my setting with i3wm.
Code:
emerge -pv xscreensaver

These are the packages that would be merged, in order:

Calculating dependencies... done!
[ebuild   R    ] x11-misc/xscreensaver-5.34::gentoo  USE="gdm jpeg opengl pam perl xinerama -new-login (-selinux) -suid" 0 KiB

Total: 1 package (1 reinstall), Size of downloads: 0 KiB
Back to top
View user's profile Send private message
pneula
n00b
n00b


Joined: 16 Jan 2009
Posts: 37

PostPosted: Thu Nov 05, 2015 4:25 pm    Post subject: Reply with quote

For sure, this is how I compile now that it works again:

Code:
emerge -pv xscreensaver

These are the packages that would be merged, in order:

Calculating dependencies... done!
[ebuild   R    ] x11-misc/xscreensaver-5.34::gentoo  USE="jpeg opengl perl -gdm -new-login -pam (-selinux) -suid -xinerama" 0 KiB

Total: 1 package (1 reinstall), Size of downloads: 0 KiB
Back to top
View user's profile Send private message
kernelOfTruth
Watchman
Watchman


Joined: 20 Dec 2005
Posts: 6108
Location: Vienna, Austria; Germany; hello world :)

PostPosted: Sat Nov 07, 2015 10:01 pm    Post subject: Reply with quote

Either disabling pam or enabling suid flag should work (I chose the latter)


Both approaches lead to a lower level of security,

Quote:
Linux-PAM separates the tasks of authentication into four independent management groups:
account modules check that the specified account is a valid authentication target under current conditions. This may include conditions like account expiration, time of day, and that the user has access to the requested service.

authentication modules verify the user's identity, for example by requesting and checking a password or other secret. They may also pass authentication information on to other systems like a keyring.

password modules are responsible for updating passwords, and are generally coupled to modules employed in the authentication step. They may also be used to enforce strong passwords.

session modules define actions that are performed at the beginning and end of sessions. A session starts after the user has successfully authenticated.


https://en.wikipedia.org/wiki/Linux_PAM


disabling pam and suid is probably the better approach if certain goals don't need to be met.


Thanks :)
_________________
https://github.com/kernelOfTruth/ZFS-for-SystemRescueCD/tree/ZFS-for-SysRescCD-4.9.0
https://github.com/kernelOfTruth/pulseaudio-equalizer-ladspa

Hardcore Gentoo Linux user since 2004 :D
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Desktop Environments All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum