[Pkg-utopia-maintainers] Bug#646678: policykit-1-gnome: user with no password (empty password field in /etc/shadow) gets asked for password

[Paul Wise]

Package: policykit-1-gnome
Version: 0.104-2
Severity: normal

When I am logged in via SSH and try to shut down the machine I get asked
for a password even though the user trying to shut down the machine has
no password set. The authentication fails whether I put nothing in the
password field or put something in it. The action in the details part of
the dialog is org.freedesktop.consolekit.system.stop-multiple-users.

root at morrison:~# grep guest /etc/passwd /etc/shadow
/etc/passwd:guest:x:1000:1000:Guesty McGuest,,,:/home/guest:/bin/bash
/etc/shadow:guest::15084:0:99999:7:::

-- System Information:
Debian Release: wheezy/sid
  APT prefers experimental
  APT policy: (1900, 'experimental'), (1800, 'unstable'), (1700, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 3.0.0-2-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_AU.UTF-8, LC_CTYPE=en_AU.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages policykit-1-gnome depends on:
ii  libc6                  2.13-21 
ii  libgdk-pixbuf2.0-0     2.24.0-1
ii  libglib2.0-0           2.30.1-2
ii  libgtk-3-0             3.0.12-2
ii  libpolkit-agent-1-0    0.102-1 
ii  libpolkit-gobject-1-0  0.102-1 
ii  policykit-1            0.102-1 

-- 
bye,
pabs

http://wiki.debian.org/PaulWise
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: This is a digitally signed message part
URL: <http://lists.alioth.debian.org/pipermail/pkg-utopia-maintainers/attachments/20111026/82f4e555/attachment.pgp>