Bug#666459: gnome-screensaver: can't unlock screen because of invalid password (while valid)

[Alexandre Chapellon]

Package: gnome-screensaver
Version: 3.2.2-1
Severity: important

Dear Maintainer,
*** Please consider answering these questions, where appropriate ***

   * What led up to the situation?
   * What exactly did you do (or not do) that was effective (or
     ineffective)?
   * What was the outcome of this action?
   * What outcome did you expect instead?

*** End of the template - remove these lines ***
   * What led up to the situation?
Install gnome-shell on wheezy

   * What exactly did you do (or not do) that was effective (or
     ineffective)?
removed in pam module for gnome-screensaver:
include common-auth

and replaced it with:
auth sufficient pam-unix.so

   * What was the outcome of this action?
works as expected: can't unlock with invalid password and unlock correctly with
valid passwd. Maybe this action have side effects I don't imagine. However, I
first tried to use the required metho instead of sufficient and it didn't
helped. Sufficient works but auth.log still contains auth failure message for
the gnome-screensaver service:

Mar 31 00:29:17 elronde unix_chkpwd[10017]: check pass; user unknown
Mar 31 00:29:22 elronde unix_chkpwd[10019]: check pass; user unknown
Mar 31 00:29:22 elronde unix_chkpwd[10019]: password check failed for user
(alxgomz)
Mar 31 00:29:22 elronde gnome-screensaver-dialog: pam_unix(gnome-
screensaver:auth): authentication failure; logname= uid=1000 euid=1000 tty=:0.0
ruser= rhost=  user=alxgomz
Mar 31 00:29:22 elronde gnome-screensaver-dialog: gkr-pam: unlocked login
keyring
Mar 31 00:29:22 elronde unix_chkpwd[10020]: could not obtain user info
(alxgomz)


   * What outcome did you expect instead?
I expected the required or requisite method to work for gnome-screensaver
module (and so do the include common-auth), or and the sufficient method not to
log auth failures.



-- System Information:
Debian Release: wheezy/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 3.2.0-2-rt-amd64 (SMP w/4 CPU cores; PREEMPT)
Locale: LANG=fr_FR.utf8, LC_CTYPE=fr_FR.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages gnome-screensaver depends on:
ii  dbus-x11                   1.4.18-1
ii  dpkg                       1.16.2
ii  gnome-icon-theme           3.2.1.2-1
ii  gnome-session-bin          3.2.1-1
ii  gsettings-desktop-schemas  3.2.0-2
ii  libc6                      2.13-27
ii  libcairo2                  1.10.2-7
ii  libdbus-1-3                1.4.18-1
ii  libdbus-glib-1-2           0.98-1
ii  libgdk-pixbuf2.0-0         2.24.1-1
ii  libglib2.0-0               2.30.2-6
ii  libgnome-desktop-3-2       3.2.1-3
ii  libgnomekbd7               3.2.0-1
ii  libgtk-3-0                 3.2.3-1
ii  libpam0g                   1.1.3-7
ii  libx11-6                   2:1.4.4-4
ii  libxext6                   2:1.3.0-3
ii  libxklavier16              5.2.1-1
ii  libxxf86vm1                1:1.1.1-2

Versions of packages gnome-screensaver recommends:
ii  gnome-power-manager   3.2.1-2
ii  libpam-gnome-keyring  3.2.2-2

gnome-screensaver suggests no packages.

-- Configuration Files:
/etc/pam.d/gnome-screensaver changed:
@include common-auth
auth optional pam_gnome_keyring.so


-- no debconf information