Bug 1156703

Summary: Gnome lock screen only requires first 8 characters of password to unlock
Product: [openSUSE] openSUSE Tumbleweed Reporter: Alan Johnson <aj>
Component: GNOMEAssignee: E-mail List <gnome-bugs>
Status: RESOLVED DUPLICATE QA Contact: E-mail List <qa-bugs>
Severity: Major    
Priority: P5 - None CC: aj, fcrozat, masterpatricko, nwr10cst-oslnx, yast2-maintainers
Version: Current   
Target Milestone: ---   
Hardware: x86-64   
OS: Other   
Whiteboard:
Found By: --- Services Priority:
Business Priority: Blocker: ---
Marketing QA Status: --- IT Deployment: ---
Attachments: About screen in Gnome

Description Alan Johnson 2019-11-13 23:53:02 UTC
Created attachment 824100 [details]
About screen in Gnome

Hi,

I've discovered that the Gnome lock screen only requires the first 8 characters of my password to unlock.  My password is 14 characters long.
Comment 1 Frederic Crozat 2019-11-14 08:06:39 UTC
Is your account local or a NIS account ?
Comment 2 Tejas Guruswamy 2019-11-21 01:43:30 UTC
It seems very recent YaST on first install set up the first (local) user with a DES hash, even though /etc/login.defs has SHA512.

There have been two reddit threads on this issue:
https://www.reddit.com/r/gnome/comments/dwizyf/does_gnome_have_a_character_limit_for_the_login/
(presumably this is OP)

https://www.reddit.com/r/openSUSE/comments/dz26m3/kde_screen_lock_is_it_a_known_bug/

Seems like installer bug, not Gnome.
Will try to reproduce on a fresh install in a VM shortly.
Comment 3 Neil Rickert 2019-11-21 15:22:25 UTC
This is likely to be bug 1155695
Comment 4 Tejas Guruswamy 2019-11-22 01:16:06 UTC
(In reply to Neil Rickert from comment #3)
> This is likely to be bug 1155695

You're right. Issue seems to be tracked in bug 1155735. This is quite a serious issue for anyone who installed off 201911* media, hopefully will be fixed very soon; in any case users will have to be told to change passwords. There is a discussion on Factory list as well today (20191121).

*** This bug has been marked as a duplicate of bug 1155735 ***