From owner-freebsd-gnome@FreeBSD.ORG Fri Nov 3 08:31:14 2006 Return-Path: X-Original-To: gnome@hub.freebsd.org Delivered-To: freebsd-gnome@FreeBSD.ORG Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id C725F16A47B; Fri, 3 Nov 2006 08:31:14 +0000 (UTC) (envelope-from marcus@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [216.136.204.21]) by mx1.FreeBSD.org (Postfix) with ESMTP id 8521D43D70; Fri, 3 Nov 2006 08:31:11 +0000 (GMT) (envelope-from marcus@FreeBSD.org) Received: from freefall.freebsd.org (marcus@localhost [127.0.0.1]) by freefall.freebsd.org (8.13.4/8.13.4) with ESMTP id kA38VA4o056386; Fri, 3 Nov 2006 08:31:10 GMT (envelope-from marcus@freefall.freebsd.org) Received: (from marcus@localhost) by freefall.freebsd.org (8.13.4/8.13.4/Submit) id kA38VAnK056370; Fri, 3 Nov 2006 08:31:10 GMT (envelope-from marcus) Date: Fri, 3 Nov 2006 08:31:10 GMT From: Joe Marcus Clarke Message-Id: <200611030831.kA38VAnK056370@freefall.freebsd.org> To: sc@users.realnet.ru, marcus@FreeBSD.org, gnome@FreeBSD.org Cc: Subject: Re: ports/104563: gnome-screensaver-dialog fails to validate the correct password X-BeenThere: freebsd-gnome@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: GNOME for FreeBSD -- porting and maintaining List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 03 Nov 2006 08:31:14 -0000 Synopsis: gnome-screensaver-dialog fails to validate the correct password State-Changed-From-To: open->closed State-Changed-By: marcus State-Changed-When: Fri Nov 3 08:29:01 UTC 2006 State-Changed-Why: The problem is gnome-screensaver-dialog drops setuid privileges prior to doing any kind of PAM authentication. This means that UNIX passwd file authentication via PAM will not work. However, external PAM modules that do not require root should work just fine. If you are only going to be using UNIX passwd authentication, don't build with PAM support (this is the default). If you will be using other PAM modules, then build with PAM. Admittedly, this sucks, but it is not FreeBSD-specific, and if this problem is really critical, it needs to be raised with the gnome-screensaver authors. http://www.freebsd.org/cgi/query-pr.cgi?pr=104563