From Bugzilla Helper:
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.6)
Gecko/20040207 Firefox/0.8

Description of problem:
When using face browsing, gdm does not behave correctly, causing your
password to be exposed in a readable format during login.

Version-Release number of selected component (if applicable):
2.4.4.5-1.2

How reproducible:
Always

Steps to Reproduce:
1. Enable face browsing in GDM
2. Double click on a user's icon
    

Actual Results:

Once you double click on a user's icon focus is transferred to the
text input box.

The text input box prompts you for a username.

Those familiar with GDM may then accidentally input their password (as
this is the usual behaviour for GDM) causing it to be visible to
anyone who sees the screen.

Expected Results:

After double clicking on the user's icon, you should be prompted for a
password in a password field, so that it is not readable when you type
it in.

Additional info:

This bug also causes GDM to incorectly let you log in by letting you
use your password as your username, and no password (ie password field
is left blank).