Bug#246652: gksu: does not honour PAM query string

Johannes Berg Johannes Berg <johannes@sipsolutions.de>, 246652@bugs.debian.org
Thu, 29 Apr 2004 20:49:37 +0200


Package: gksu
Version: 1.0.5-1
Severity: normal

After having installed OPIE for S/KEY passwords, it is impossible to use gksu.
gksu will always have a query like this:
  I need $user's password to run:
      $program
  Password: [____________]

instead of
  You need to authenticate as $user to run $program.
  $query: [______________]

where $query is the query string 'su' will give (from pam!). 
The reason for this is that after installing opie for su,
the query string looks like this:

  johannes:~$ su
  otp-md5 <seqnr> <id> ext, Response:<enter response>
  johannes:/home/johannes#

  where <seqnr> is the sequence number for s/key,
        <id>    is the account id;
  the response looks like this: "BARN ALTO IOWA DEED MOON DOW".

When you can guess the parameters, gksu will actually work
(you can guess them by calling su and aborting it), but it
really should display the parameters.

Regards,
Johannes Berg

-- System Information:
Debian Release: testing/unstable
  APT prefers unstable
  APT policy: (500, 'unstable'), (400, 'experimental')
Architecture: i386 (i686)
Kernel: Linux 2.6.3
Locale: LANG=C, LC_CTYPE=de_DE@euro (ignored: LC_ALL set to en_US)

Versions of packages gksu depends on:
ii  libatk1.0-0                 1.4.1-1      The ATK accessibility toolkit
ii  libc6                       2.3.2.ds1-12 GNU C Library: Shared libraries an
ii  libgksu0                    1.0.5-1      a graphical fronted to su library
ii  libglib2.0-0                2.2.3-1      The GLib library of C routines
ii  libgtk2.0-0                 2.2.4-3      The GTK+ graphical user interface 
ii  libpango1.0-0               1.2.5-4      Layout and rendering of internatio

-- no debconf information