Bug 1464445 - Re-logging in does not re-load user groups
Re-logging in does not re-load user groups
Status: NEW
Product: Fedora
Classification: Fedora
Component: gdm (Show other bugs)
Unspecified Unspecified
unspecified Severity unspecified
: ---
: ---
Assigned To: Ray Strode [halfline]
Fedora Extras Quality Assurance
Depends On:
  Show dependency treegraph
Reported: 2017-06-23 08:38 EDT by Alan Jenkins
Modified: 2017-06-23 08:54 EDT (History)
1 user (show)

See Also:
Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of:
Last Closed:
Type: Bug
Regression: ---
Mount Type: ---
Documentation: ---
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---

Attachments (Terms of Use)

  None (edit)
Description Alan Jenkins 2017-06-23 08:38:12 EDT
Description of problem:

Logging out and back in does not re-load the user's groups.

Version-Release number of selected component (if applicable):


How reproducible: I tried several times, including with either X session or Wayland, all attempts had this problem.

Steps to Reproduce:
1. addgroup testgroup
2. usermod -a -G testgroup $USER
3. id -a $USER
4. log out of GNOME session
5. log in to GNOME again (using gdm)
6. id -a

Actual results:

uid=1000(alan-sysop) gid=1000(alan-sysop) groups=1000(alan-sysop),10(wheel),1003(testgroup)

uid=1000(alan-sysop) gid=1000(alan-sysop) groups=1000(alan-sysop),10(wheel) context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023

Expected results:

The groups in the output of `id -a $USER` and `id -a` should be the same, after logging out and back in again.

Additional info:

This is not 100% documented... the Fedora System Adminstrator's Guide doesn't mention *any* method to re-load groups, implying that they take effect immediately.  However the behaviour is widely expected, e.g. https://unix.stackexchange.com/a/11573/29483
Comment 1 Alan Jenkins 2017-06-23 08:54:01 EDT
Rebooting gets the groups reloaded OK.

Originally I tried to restart gdm (while I was still logged in) - I know this forcibly logs you out.  But for a while now this ends up with the screen constantly flickering, gdm seems to fail in a loop with "(WW) xf86OpenConsole: VT_ACTIVATE failed: Operation not permitted".  So I was not able to test this.

Note You need to log in before you can comment on or make changes to this bug.