Dear visitor, welcome to KDE-Forum.org.
If this is your first visit here, please read the Help. It explains in detail how this page works.
To use all features of this page, you should consider registering.
Please use the registration form, to register here or read more information about the registration process.
If you are already registered, please login here.
[Debian] Update to 3.2.2 -> login with wrong passw. possi
Hi all,
after updating my Debian Woody to KDE 3.2.2 today, I am now able to login with kdm to any user (even root) without the right password!
Option in /etc/kde3/kdm/kdmrc is set correctly:
#NoPassEnable=true
The same after updating my laptop's woody.
Logins with gdm, xdm or on the console are okay!
Any ideas or the same phenomenon anyone?
Thx, Peter
root
... hm - it looks like that kdm runs under/with root rights?
Yes, indeed!
But isn't kdm supposed to run under root? On other machines (with KDE 3.2.0, KDE 3.1.5) it is also running under root and it everything is fine.
Besides, kdm was only updated, so the configuration should be the same as before...
thx, Peter
/etc/pam.d/kdm was messed up
Here is the solutions: /etc/pam.d/kdm was not complete:
-----------------------------------------------------------------
#/etc/pam.d/kdm - specify the PAM behaviour of kdm
# The standard Unix authentication modules, used with
# NIS (man nsswitch) as well as normal /etc/passwd and
# /etc/shadow entries.
@include common-auth
@include common-account
@include common-password
@include common-session
auth required pam_nologin.so
auth required pam_env.so
session required pam_limits.so
# taken from kde 3.2.0
auth required pam_unix.so shadow nullok
account required pam_unix.so
session required pam_unix.so
------------------------------------------------------------------------
Peter
root rights
... KDM has to now if it is allowed to use the root rights :wink: