tuanthng / pam-face-authentication

Automatically exported from code.google.com/p/pam-face-authentication
0 stars 0 forks source link

got root acces with out any question (no password / face were need) #115

Open GoogleCodeExporter opened 9 years ago

GoogleCodeExporter commented 9 years ago
What steps will reproduce the problem?
1. start pc (with lightdm)
2. try to login (with face) 
3. move away then try again (2.)
4. after some time in the infobox appears "Starting 
pam-face-authentication...".  It looks as if the program is stuck
5. change to virtual console
6. login with any username ... access is granted - no password or anything is 
needed,  even for root

What is the expected output? What do you see instead?
the Infobox display "Starting pam-face-authentication..." after that i can't 
login with face (no reaction by the infobox). After a while the password-input 
appears.

What version of the product are you using? On what operating system?
Pam Face Authentication 0.4 (i get the "exit by capture" bug with 0.3)
Ubuntu 11.10 

Please provide any additional information below.
mein Englisch ist nicht so gut also falls es sich schwer liest, entschuldigung 

Original issue reported on code.google.com by Fabian.N...@gmail.com on 23 Feb 2012 at 6:27

GoogleCodeExporter commented 9 years ago
I forgot to translate the last point^^

"my English is not so good so if it is hard to read, sorry"

Original comment by Fabian.N...@gmail.com on 23 Feb 2012 at 6:29

GoogleCodeExporter commented 9 years ago
Update: steps 2 to five were not needed to produce the bug

boot up -> Strg+Alt+F1 -> type any user name -> access granted

it works only with the virtual console (I think the programm can't start the x 
things for camera there so it fails. 

Wherever a graphical interface is available, it works.

It is possible to deactivate the pam module for all non graphic logins?

I think you can manage this with the pam configuration files, but I do not 
where or how.

Original comment by Fabian.N...@gmail.com on 25 Feb 2012 at 11:34

GoogleCodeExporter commented 9 years ago
i've found a work-around

remove the line "auth [success=3 default=ignore] pam_face_authentication.so 
enableX" from the file /etc/pam.d/common-auth
and add it in /etc/pam.d/lightm (/etc/pam.d/gdm) and /etc/pam.d/sudo

abouve the line
"@include common-auth"

now pam-face-authentication is disabled for login (login is only used in 
virtual terminal (or if you start login manualy))

so face work in: lightdm, gdm, and for sudo and my root account is protected 
again

Original comment by Fabian.N...@gmail.com on 25 Feb 2012 at 12:23