Bug 443527

Summary: Yast2 starts often without asking for root pw. 32/64 bit
Product: [openSUSE] openSUSE 11.1 Reporter: Robby Verberne <monkey9>
Component: YaST2Assignee: E-mail List <yast2-maintainers>
Status: RESOLVED FIXED QA Contact: Jiri Srain <jsrain>
Severity: Normal    
Priority: P5 - None CC: forgotten_zhFaldehF_
Version: Beta 4   
Target Milestone: ---   
Hardware: 64bit   
OS: SUSE Other   
Whiteboard:
Found By: Beta-Customer Services Priority:
Business Priority: Blocker: ---
Marketing QA Status: --- IT Deployment: ---
Attachments: yast2.tar.bz2 64bit

Description Robby Verberne 2008-11-10 21:00:07 UTC
Sometimes yast asks for a root pw, but very often it does not.
Comment 1 Forgotten User zhFaldehF_ 2008-11-11 06:22:10 UTC
Have you just used your root account? Is there a time out you have set? What does your /etc/sudoers look like? 
Comment 2 Robby Verberne 2008-11-11 10:55:12 UTC
No, i am seldom using my root account.
If i need apps in rootmodus, i start them up.
That is why it struck me that yast2 comes without pw requester sometimes, it allways asked for it as long as i can remember..
At first  my 32 bit system had it, and now my 64 bit also, since the last update.

Default, never changed it.

# Defaults specification

# Prevent environment variables from influencing programs in an
# unexpected or harmful way (CVE-2005-2959, CVE-2005-4158, CVE-2006-0151)
Defaults always_set_home
Defaults env_reset
# Change env_reset to !env_reset in previous line to keep all environment variables
# Following list will no longer be necessary after this change

Defaults env_keep = "LANG LC_ADDRESS LC_CTYPE LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE LC_TIME LC_ALL LANGUAGE LINGUAS XDG_SESSION_COOKIE"
# Comment out the preceding line and uncomment the following one if you need
# to use special input methods. This may allow users to compromise  the root
# account if they are allowed to run commands without authentication.
#Defaults env_keep = "LANG LC_ADDRESS LC_CTYPE LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE LC_TIME LC_ALL LANGUAGE LINGUAS XDG_SESSION_COOKIE XMODIFIERS GTK_IM_MODULE QT_IM_MODULE QT_IM_SWITCHER"

# In the default (unconfigured) configuration, sudo asks for the root password.
# This allows use of an ordinary user account for administration of a freshly
# installed system. When configuring sudo, delete the two
# following lines:
Defaults targetpw   # ask for the password of the target user i.e. root
ALL	ALL=(ALL) ALL   # WARNING! Only use this together with 'Defaults targetpw'!

# Runas alias specification

# User privilege specification
root	ALL=(ALL) ALL

# Uncomment to allow people in group wheel to run all commands
# %wheel	ALL=(ALL) ALL

# Same thing without a password
# %wheel	ALL=(ALL) NOPASSWD: ALL

# Samples
# %users  ALL=/sbin/mount /cdrom,/sbin/umount /cdrom
# %users  localhost=/sbin/shutdown -h now
Comment 3 Stefan Hundhammer 2008-11-14 17:04:46 UTC
What environment are we talking about? KDE (what version)? GNOME? Some other window manager? Just shell?
Comment 4 Robby Verberne 2008-11-17 20:20:09 UTC
OS:  Linux 2.6.27.5-1-default x86_64
  Huidige gebruiker:  oddball@AMD64x2-sfn1
  Systeem:  openSUSE 11.1 Beta 4.6 (x86_64)
  KDE:  4.1.3 (KDE 4.1.3) "release 1.3"

It is mostly when i call systemmanagement, itc: Yast2.
A passwordrequester should appear before the config screen appears, but if i once filled in my rootpw, am finished, close yast2, but open it after some time, it opens without asking for rootpw again.
This i find strange...
Comment 5 Jan Kupec 2008-11-18 13:43:05 UTC
OK, but how do you call it? From an xterm, or from GUI menu?
Comment 6 Robby Verberne 2008-11-19 16:37:13 UTC
In this case it happens when using gui.
Comment 7 Jan Kupec 2008-11-20 13:16:39 UTC
Well, you're still not making yourself clear. You can run yast GUI from both command line (xterm) and a GUI menu (the KDE application launcher). So i _guess_ you run yast from the KDE launcher, is that right?

In that case, yast logs would help. Please try to reproduce it and attach yast logs right after it happens.

Also note that the dialog for entering root password has a checkbox saying 'Remember password'. Have you checked that before?
Comment 8 Robby Verberne 2008-11-20 13:34:05 UTC
(In reply to comment #7 from Ján Kupec)
> Well, you're still not making yourself clear. You can run yast GUI from both
> command line (xterm) and a GUI menu (the KDE application launcher). So i
> _guess_ you run yast from the KDE launcher, is that right?

The wrench with the yellow handle on the taskbar i use since in kde4.1 it is not yet very clear to me how to set a keyboard shortcut...
> 
> In that case, yast logs would help. Please try to reproduce it and attach yast
> logs right after it happens.
> 

I just updated to OS:  Linux 2.6.27.5-2-default x86_64
  Huidige gebruiker:  oddball@AMD64x2-sfn1
  Systeem:  openSUSE 11.1 Beta 5.1 (x86_64)
  KDE:  4.1.3 (KDE 4.1.3) "release 2.1"

> Also note that the dialog for entering root password has a checkbox saying
> 'Remember password'. Have you checked that before?
> 

No i never check that box, as i noticed earlier (since suse 9.2) that it won't remember it, and i think it is not sane or safe if it would.
I don't mind typing my pw to get root, in fact. i am so used to it, that if i am not asked i am surprised;) 

Comment 9 Jan Kupec 2008-11-20 14:00:21 UTC
(In reply to comment #8 from Robby Verberne)
> (In reply to comment #7 from Ján Kupec)
> > In that case, yast logs would help. Please try to reproduce it and attach
> > yast logs right after it happens.
> > 
> 
> I just updated to OS:  Linux 2.6.27.5-2-default x86_64
>   Huidige gebruiker:  oddball@AMD64x2-sfn1
>   Systeem:  openSUSE 11.1 Beta 5.1 (x86_64)
>   KDE:  4.1.3 (KDE 4.1.3) "release 2.1"

Nice but this is not what i was asking for :O) I asked you to reproduce the problem and attach yast logs right after it happens. You neither did say whether you reproduced it nor you attached the logs (see http://en.opensuse.org/Bugs/YaST if you don't know which logs to attach).
Comment 10 Robby Verberne 2008-11-20 14:11:43 UTC
(In reply to comment #9 from Jan Kupec)

> 
> Nice but this is not what i was asking for :O) I asked you to reproduce the
> problem and attach yast logs right after it happens. You neither did say
> whether you reproduced it nor you attached the logs (see
> http://en.opensuse.org/Bugs/YaST if you don't know which logs to attach).
> 

Indeed, it is not.
But what i was trying to say is, if it still persists;)
As soon as it happens again, i'll attach the logs.
I have an older log available, but i don't know if it meets your expectations, i'll attach it anyhow.
Comment 11 Robby Verberne 2008-11-20 14:13:27 UTC
Created attachment 253913 [details]
yast2.tar.bz2 64bit
Comment 12 Jan Kupec 2008-11-20 17:01:04 UTC
Oook.. now i realized yast logs won't help us, since the problem is _before_ actually starting it :O) sorry.

The problem must be somewhere in the sudo system or kdesu (the graphical root password dialog). If it happens again, please try to open an xterm and call 'kdesu yast2' (or any other application (except a virus :O)) as user, and tell us whether that asked for password or not.
Comment 13 Robby Verberne 2008-11-21 15:06:12 UTC
I did not notice this anymore on both boxes.
Will close for now, and reopen if nessesary.