Bug#236078: kdm in testing / unstable does not validate passwords

[Wayne Schroeder <raz@chewies.net>]

The auth.log (messages or syslog either) prints anything out when you
login.  It just lets you right in.

libpam-runtime                    0.72-35
libpam0g                          0.76-15
kdelibs4                          3.1.5-1

---[ /etc/pam.d/kdm ]---
#
# /etc/pam.d/kdm - specify the PAM behaviour of kdm
#

# The standard Unix authentication modules, used with
# NIS (man nsswitch) as well as normal /etc/passwd and
# /etc/shadow entries.
@include common-auth
@include common-account
@include common-password
@include common-session

auth       required     pam_nologin.so
auth       required     pam_env.so
session    required     pam_limits.so
---[ EOF ]---

/etc/pam.d/common* doesn't exist on my install.

Xdm works fine for whatever it's worth.

Wayne


On Thu, Mar 04, 2004 at 05:20:50PM +0200, Riku Voipio wrote:
> This sounds definetly scary, however, we need some more info.
> Specifically,
> 
> The versions of following packages, and if not the versions in sarge,
> try with the sarge versions:
> 
> libpam-runtime
> libpam0g
> kdelibs4 
> 
> contents of 
> /etc/pam.d/kdm
> /etc/pam.d/common*