Created attachment 1697982 [details] user login fail ws-trace and root success ws-root.trace User account cannot login to Cockpit, root user can. SELinux disabled. Version-Release number of selected component (if applicable): 217 How reproducible: Any user login fails Steps to Reproduce: 1. Attempt user login 2. Attempt root login Actual results: user login 'Wrong user name or password' root login success Expected results: user login success Additional info: strace for user login failure and root login success attached
After a bit more testing, user login works if you specify a Connect to host, even though it is the same machine. It connects via SSH and the login is successful.
I finally got round to staring at the straces, and that gave it away: 214504 execve("/usr/bin/tcsh", ...) tcsh indeed doesn't work, we got a similar report upstream here: https://github.com/cockpit-project/cockpit/issues/14060 The session does get started, so authentication, PAM, etc. work fine. But tcsh is trying to do something (I don't yet know any details) which causes a permission error, and then it exits: 214504 creat("3", 0666) = -1 EACCES (Permission denied) 214504 write(18, "3: Permission denied.\n", 22) = 22 214504 +++ exited with 1 +++ I can reproduce the problem easily.
https://github.com/cockpit-project/cockpit/pull/14301
This was fixed in https://github.com/cockpit-project/cockpit/pull/14375 and released in Cockpit 226: https://bodhi.fedoraproject.org/updates/FEDORA-2020-635cfe8993
FEDORA-2020-635cfe8993 has been submitted as an update to Fedora 31. https://bodhi.fedoraproject.org/updates/FEDORA-2020-635cfe8993
FEDORA-2020-635cfe8993 has been pushed to the Fedora 31 stable repository. If problem still persists, please make note of it in this bug report.