Bug 1302412

Summary:	gnome-ssh-askpass: Totally unclear what it's asking the password for
Product:	[Fedora] Fedora	Reporter:	barsnick
Component:	openssh	Assignee:	Jakub Jelen <jjelen>
Status:	CLOSED EOL	QA Contact:	Fedora Extras Quality Assurance <extras-qa>
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	22	CC:	barsnick, jjelen, mattias.ellert, mgrepl, plautrba, tmraz
Target Milestone:	---
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2016-07-19 18:41:10 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:

Description barsnick 2016-01-27 18:57:52 UTC

Description of problem:
Sometimes on wakeup from sleep, I have received a gnome-ssh-askpass dialog. It was totally unclear to me for which password it was asking, and could just have been someone trying to steal it.

Version-Release number of selected component (if applicable):
6.9p1-10.fc22

How reproducible:
unclear

Additional info:
I log in to two separate hosts from my laptop, using the openssh ssh client from gnome-terminal, with password auth. In addition, I sometimes mount directories from them using fuse-sshfs.

The last time I got the gnome-ssh-askpass "popup", I'm pretty sure the ssh login connections were closed, together with gnome-terminal. *Possibly*, I had accidentally left one of the remote hosts mounted with fuse-sshfs though.

I understand that the dialog is not supposed to allow me to focus back to other programs. (I got that from ticket #174197.) That meant I couldn't check the process tree to see who was giving me this dialog. The dialog itself also said nothing. It could just as well have been a malicious dialog trying to steal my password! And even if that is a far shot, I couldn't have known for *which* host the password was being asked.

What's more: gnome-shell presents me a menu for the active tool, in this case this dialog (I think even without extensions), which has a quit item. If I select and press this menu item, nothing quits, but the menu stays expanded and this menu item selected, as if it was frozen.

How can I get rid of this dialog? And could it pretty-please tell me for what I'm authenticating (account, host, ...)?

Comment 1 Jakub Jelen 2016-02-01 09:51:57 UTC

openssh-askpass prints user and host for you so you know where are you logging in. Does it looks different for you?

Screenshot from my F22 virtual machine:
https://jjelen.fedorapeople.org/ssh-askpass.png
openssh-askpass-6.9.p1-9.fc22-x86_64 under gnome-shell

Normal ssh connection has no reason to ask for a password after wake-up, because it just "dies". My bet is the sshfs (or autossh), which tries to reconnect after failure. Using keys is more appropriate for such case.


> What's more: gnome-shell presents me a menu for the active tool, in this case this dialog (I think even without extensions), which has a quit item.

Quit works for me also fine. It has the same effect as the cancel button or writing <ctrl>+D into normal password prompt. It closes the window and pops again (three times as it is default amount of password tires in ssh). Then the connection is rejected.
If the connection is re-established immediately, it is just a configuration of your sshfs. Normal ssh does not do that.

Comment 2 Fedora End Of Life 2016-07-19 18:41:10 UTC

Fedora 22 changed to end-of-life (EOL) status on 2016-07-19. Fedora 22 is
no longer maintained, which means that it will not receive any further
security or bug fix updates. As a result we are closing this bug.

If you can reproduce this bug against a currently maintained version of
Fedora please feel free to reopen this bug against that version. If you
are unable to reopen this bug, please file a new report against the
current release. If you experience problems, please add a comment to this
bug.

Thank you for reporting this bug and we are sorry it could not be fixed.

Comment 3 barsnick 2016-10-31 12:53:55 UTC

Can't reproduce on F24, dropping flag "needsinfo".