You are not logged in.
So, a few days ago I tried to setup the fingerprint reader. It is work as expected and I can use it to login, and sudo related stuffs. Today, I accidentally tap the enter key without providing the password and I can login without SDDM complaining. I also check by running sudo and the terminal still asking for password, so the password is still there. Can anyone tell me what else that I should check to fix this?
/etc/pam.d/kde
#%PAM-1.0
auth sufficient pam_unix.so try_first_pass likeauth nullok
auth sufficient pam_fprintd.so
auth include system-login
account include system-login
password include system-login
session include system-login/etc/pam.d/login
#%PAM-1.0
auth sufficient pam_unix.so try_first_pass likeauth nullok
auth sufficient pam_fprintd.so
auth required pam_securetty.so
auth requisite pam_nologin.so
auth include system-local-login
account include system-local-login
session include system-local-login
session optional pam_gnome_keyring.so auto_start/etc/pam.d/sddm
#%PAM-1.0
auth sufficient pam_unix.so try_first_pass likeauth nullok
auth sufficient pam_fprintd.so
auth include system-login
-auth optional pam_gnome_keyring.so
-auth optional pam_kwallet5.so
account include system-login
password include system-login
-password optional pam_gnome_keyring.so use_authtok
session optional pam_keyinit.so force revoke
session include system-login
-session optional pam_gnome_keyring.so auto_start
-session optional pam_kwallet5.so auto_start/etc/pam.d/su
#%PAM-1.0
auth sufficient pam_unix.so try_first_pass likeauth nullok
auth sufficient pam_fprintd.so
auth sufficient pam_rootok.so
# Uncomment the following line to implicitly trust users in the "wheel" group.
#auth sufficient pam_wheel.so trust use_uid
# Uncomment the following line to require a user to be in the "wheel" group.
#auth required pam_wheel.so use_uid
auth required pam_unix.so
account required pam_unix.so
session required pam_unix.so/etc/pam.d/sudo
#%PAM-1.0
auth sufficient pam_unix.so try_first_pass likeauth nullok
auth sufficient pam_fprintd.so
auth include system-auth
account include system-auth
session include system-auth/etc/pam.d/system-local-login
#%PAM-1.0
auth sufficient pam_unix.so try_first_pass likeauth nullok
auth sufficient pam_fprintd.so
auth include system-login
account include system-login
password include system-login
session include system-loginLast edited by renodesper (2020-07-17 14:49:32)
Offline
Okay, so I found out that when I use systemctl, it also didn't ask for password but other apps still ask for password. Below is my visudo configuration:
visudo
## Uncomment to allow members of group wheel to execute any command
%wheel ALL=(ALL) ALL
## Same thing without a password
# %wheel ALL=(ALL) NOPASSWD: ALL--- update
I tried to create a new user using useradd, and the user also able to login without providing the password. Also, I tried to use lightdm and it shows similar behavior with sddm.
Removing user from wheel group only affecting sudo, but the login without password on sddm and lightdm is still possible.
--- update
Okay, so I've found the problem. It looks like when I disable the systemd-home and use the conventional way, I forgot to re-add the rule that was supposed to be exist in system-auth.
Thank you everyone.
Last edited by renodesper (2020-07-17 14:49:16)
Offline