Bug 2055956 - authentication is required to update metadata
Summary: authentication is required to update metadata
Keywords:
Status: CLOSED EOL
Alias: None
Product: Fedora
Classification: Fedora
Component: gnome-shell
Version: 38
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: GNOME SIG Unassigned
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard: RejectedBlocker
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2022-02-18 02:55 UTC by Chris Murphy
Modified: 2024-05-21 14:13 UTC (History)
11 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2024-05-21 14:13:07 UTC
Type: Bug
Embargoed:


Attachments (Terms of Use)
journal (434.48 KB, text/plain)
2022-02-18 02:55 UTC, Chris Murphy
no flags Details
Screenshot: Authentication Required - Authentication is required to update metadata (58.09 KB, image/png)
2022-12-26 12:36 UTC, Hans Ulrich Niedermann
no flags Details

Description Chris Murphy 2022-02-18 02:55:59 UTC
Created attachment 1861814 [details]
journal

Description of problem:

A modal dialog unexpectedly appears requiring authentication for a task that I do not understand. And then can't be immediately cancelled, I had to try multiple times to dismiss it.

Version-Release number of selected component (if applicable):
gnome-shell-42~beta-2.fc36.x86_64
gnome-software-42~beta-2.fc36.x86_64


How reproducible:
No idea how I even ended up in this situation, so transient

Vague recollection of sequence:
* shell gives updates notification, clicked on it
* gnome-software update panel with a single update, fingerprint reader firmware
* I know for sure I did not agree to apply/start any updates
* I think I clicked the upper right corner X to close gnome-software, maybe I went to the application pull down menu and quit there
* modal dialog about updating metadata appear that needed to be cancelled multiple times to dismiss
* a different modal dialog about modifying repository appears, and needed to be cancelled


Actual results:

I see this dialog
https://photos.app.goo.gl/qGFg2NbjYsoaXNW69

Click cancel several times and it then becomes this dialog
https://photos.app.goo.gl/QasGjjrLgGMEzp156

Which can also be canceled



Expected results:

(a) don't ask vague questions requiring authentication
(b) once cancel should be enough to dismiss any modal dialog

Additional info:


Attached log starts before the problem, I think the problem begins about here:

[ 7190.614147] polkitd[807]: Operator of unix-session:2 FAILED to authenticate to gain authorization for action org.freedesktop.Flatpak.metadata-update for system-bus-name::1.107 [/usr/bin/gnome-software --gapplication-service] (owned by unix-user:chris)

Comment 1 Fedora Blocker Bugs Application 2022-02-18 02:57:50 UTC
Proposed as a Blocker for 36-final by Fedora user chrismurphy using the blocker tracking app because:

 All elements of the default panel (or equivalent) configuration in all release-blocking desktops must function correctly in typical use. 
https://fedoraproject.org/wiki/Fedora_36_Final_Release_Criteria#Default_panel_functionality

I'm not sure "eventually functions correctly" gives this a pass.

Comment 2 Geoffrey Marr 2022-02-21 16:29:37 UTC
The decision to classify this bug as a "RejectedBlocker (Beta)" was made based off votes here: [0]

[0] https://pagure.io/fedora-qa/blocker-review/issue/618

Comment 3 Geoffrey Marr 2022-02-21 16:30:13 UTC
The decision to classify this bug as a "RejectedBlocker (Final)" was made based off votes here: [0]

[0] https://pagure.io/fedora-qa/blocker-review/issue/618

Comment 4 aldo@gigantesco.org 2022-03-16 10:42:49 UTC
I also have the same problem.
I can reproduce always the behavior when switching between users on my machine.
I.E. if I activate the switch user option - which suspends the current user and activates a different one, when I come back to the original user I am requested, after the login authentication, to perform one or more authentications depending, I suppose, on the number of applications running.

Comment 5 aldo@gigantesco.org 2022-03-16 10:46:42 UTC
Note: this behaviour started since I upgraded to Fedora 35. I don't remember this behaviour with the previous release.

Comment 6 Hans Ulrich Niedermann 2022-12-26 12:36:57 UTC
Created attachment 1934498 [details]
Screenshot: Authentication Required - Authentication is required to update metadata

I am also running multiple user sessions on one machine, and also get an unrequested modal dialog asking for my password, without any hint as to who needs that password for what and why it is asking for that password at that time.

It appears there are sometimes more than one of those password prompting dialogs, and the actually active one is not always the one which is displayed, so a bit of trickery is sometimes required to close that dialog.

It is also sometimes fun to find on which monitor the dialog is displayed, but at least when there is more than one of these modal dialogs, I think I cannot remember them being on different monitors.

I cannot verify whether the dialog I see is the same one as referred to in this bug, because the original reporters' external links to screenshot images do not work, so I have attached a screenshot of what I am seeing.

This occurs on an up to date F37 system right now, but I cannot remember when it started.

In any case, a UI which asks for a password without any user interaction preceding that password prompt, and without any hint as to which software is actually asking for that password and why **is a security issue**.

I am not even certain whether gnome-shell is the proper software component to file this against.

Anyway, here are my versions of the two software packages mentioned above, in case they are involved:

    gnome-shell-43.2-1.fc37.x86_64
    gnome-software-43.2-1.fc37.x86_64

Comment 7 Ben Cotton 2023-04-25 16:54:13 UTC
This message is a reminder that Fedora Linux 36 is nearing its end of life.
Fedora will stop maintaining and issuing updates for Fedora Linux 36 on 2023-05-16.
It is Fedora's policy to close all bug reports from releases that are no longer
maintained. At that time this bug will be closed as EOL if it remains open with a
'version' of '36'.

Package Maintainer: If you wish for this bug to remain open because you
plan to fix it in a currently maintained version, change the 'version' 
to a later Fedora Linux version. Note that the version field may be hidden.
Click the "Show advanced fields" button if you do not see it.

Thank you for reporting this issue and we are sorry that we were not 
able to fix it before Fedora Linux 36 is end of life. If you would still like 
to see this bug fixed and are able to reproduce it against a later version 
of Fedora Linux, you are encouraged to change the 'version' to a later version
prior to this bug being closed.

Comment 8 Hans Ulrich Niedermann 2023-05-24 19:13:14 UTC
I had that modal dialog a few days ago on my up to date F38 system, so this does not appear to have been fixed yet.

In case it matters:

    gnome-shell-44.1-1.fc38.x86_64
    gnome-software-44.1-1.fc38.x86_64

Comment 9 Fedora Admin user for bugzilla script actions 2023-12-06 08:21:22 UTC
This component is maintained by the GNOME project. Issues with it should be reported directly to GNOME at https://gitlab.gnome.org/GNOME/.

This issue should only be kept open if it:

1. Relates to Fedora packaging or integration with other Fedora components
2. Is required for Fedora release processes, such as blocker bugs and freeze exceptions

If this issue isn't needed for either of these two reasons, please:

 * create an issue with GNOME
 * add a link to the GNOME issue here
 * close this issue as CLOSED/UPSTREAM

Thank you!

Comment 10 Aoife Moloney 2024-05-07 15:45:12 UTC
This message is a reminder that Fedora Linux 38 is nearing its end of life.
Fedora will stop maintaining and issuing updates for Fedora Linux 38 on 2024-05-21.
It is Fedora's policy to close all bug reports from releases that are no longer
maintained. At that time this bug will be closed as EOL if it remains open with a
'version' of '38'.

Package Maintainer: If you wish for this bug to remain open because you
plan to fix it in a currently maintained version, change the 'version' 
to a later Fedora Linux version. Note that the version field may be hidden.
Click the "Show advanced fields" button if you do not see it.

Thank you for reporting this issue and we are sorry that we were not 
able to fix it before Fedora Linux 38 is end of life. If you would still like 
to see this bug fixed and are able to reproduce it against a later version 
of Fedora Linux, you are encouraged to change the 'version' to a later version
prior to this bug being closed.

Comment 11 Aoife Moloney 2024-05-21 14:13:07 UTC
Fedora Linux 38 entered end-of-life (EOL) status on 2024-05-21.

Fedora Linux 38 is no longer maintained, which means that it
will not receive any further security or bug fix updates. As a result we
are closing this bug.

If you can reproduce this bug against a currently maintained version of Fedora Linux
please feel free to reopen this bug against that version. Note that the version
field may be hidden. Click the "Show advanced fields" button if you do not see
the version field.

If you are unable to reopen this bug, please file a new report against an
active release.

Thank you for reporting this bug and we are sorry it could not be fixed.


Note You need to log in before you can comment on or make changes to this bug.