Bug 1268624 - Corner case where lxdm allows the login even if the provided password is wrong
Summary: Corner case where lxdm allows the login even if the provided password is wrong
Keywords:
Status: CLOSED DUPLICATE of bug 1271377
Alias: None
Product: Fedora
Classification: Fedora
Component: lxdm
Version: 23
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Christoph Wickert
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2015-10-03 21:58 UTC by Giulio 'juliuxpigface'
Modified: 2015-10-13 19:51 UTC (History)
3 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2015-10-13 19:51:45 UTC
Type: Bug
Embargoed:

Attachments (Terms of Use)

Description Giulio 'juliuxpigface' 2015-10-03 21:58:45 UTC 
Description of problem:
I found what seems a corner case where lxdm allows the login even if the provided password is wrong. This might not be a true bug, but in my opinion the behavior of lxdm in this situation is somehow strange.

Version-Release number of selected component (if applicable):
lxdm-0.5.1-6.D20150806git17ac3772.fc23.x86_64

How reproducible:
Always

Steps to Reproduce:
1. Create an user without password.
2. Login through lxdm with that user.
3. Provide a password for the login.

Actual results:
lxdm allows the user to login.

Expected results:
In my opinion (but I might be wrong), lxdm should refuse the login. The real password is blank, so if no blank password is provided, the real combination of "login name + password" is not actually matched.

Additional info:
Fedora 23 Final TC1 (x86_64) on qemu-kvm.
Comment 1 Rex Dieter 2015-10-13 19:51:45 UTC 

*** This bug has been marked as a duplicate of bug 1271377 ***
Note You need to log in before you can comment on or make changes to this bug.