Fedora Account System
Red Hat Associate
Red Hat Customer
Description of problem: In Fedora 19, when using xlock to lock the screen, I need to type the password twice to unlock it. After I type the password once, a prompt appears in the middle of the screen, asking the password again. Version-Release number of selected component (if applicable): xlockmore-5.43-1.fc19 How reproducible: Always Steps to Reproduce: 1. Open a terminal, and type 'xlock' to go to the lock screen. 2. Click any key to the interface to enter the password. 3. Type the password, then Enter key. Another password prompt appears. 4. Type the password the second time. Back to the unlocked screen. Actual results: As described above, you need to type the password twice. Expected results: Only once is needed, which is the case in Fedora 18 with xlockmore 5.41-1. Additional info: There are similar bug reports in archlinux: - https://bugs.archlinux.org/task/35520 - https://bbs.archlinux.org/viewtopic.php?id=162955
Hmm, it works for me. Do you have anything in your log files concerning xlock and authentication failures?
Below is the output in `journalctl -f _UID=1000` when I type my password twice to unlock: 8月 02 23:20:40 helium xlock[8853]: Start: alick, alick, :1 8月 02 23:20:53 helium xlock[8853]: Stop: alick, alick, :1, 0m 13s Below is the output when I type the password once, then press enter multiple times and the login attempt fails, then type the password twice to login: 8月 02 23:21:24 helium xlock[8876]: Start: alick, alick, :1 8月 02 23:21:39 helium xlock[8876]: pam_unix(xlock:auth): authentication failure; logname=alick uid=1000 euid=1000 tty=:1 ruser= rhost= user=alick 8月 02 23:21:41 helium /etc/gdm/Xsession[4991]: (polkit-gnome-authentication-agent-1:5171): polkit-gnome-1-WARNING **: No icon for themed icon with name 'fprint' 8月 02 23:21:43 helium /etc/gdm/Xsession[4991]: [fvwm][ComplexFunction]: <<ERROR>> Grab failed in function EWMHActivateWindowFunc, unable to execute immediate action 8月 02 23:21:44 helium /etc/gdm/Xsession[4991]: [fvwm][ComplexFunction]: <<ERROR>> Grab failed in function FuncFocusWindow, unable to execute immediate action 8月 02 23:22:06 helium unix_chkpwd[8907]: check pass; user unknown 8月 02 23:22:42 helium unix_chkpwd[8916]: check pass; user unknown 8月 02 23:22:42 helium xlock[8876]: pam_unix(xlock:auth): authentication failure; logname=alick uid=1000 euid=1000 tty=:1 ruser= rhost= user=root 8月 02 23:22:42 helium xlock[8876]: pam_succeed_if(xlock:auth): requirement "uid >= 1000" not met by user "root" 8月 02 23:22:43 helium xlock[8876]: xlock: failed unlock attempt on user alick 8月 02 23:23:26 helium xlock[8876]: Stop: alick, alick, :1, 2m 2s Here 8月 means August in English FYI.
Seems like the second time asking for password is to feed it to polkit authentication? 'fprint' is short for finger print, and I do have finger print authentication device on my Lenovo Thinkpad T400. However it is disabled in gnome-control-center.
Created attachment 796437 [details] screenshot of xlock debug mode
I did some more investigation today. When I execute xlock -debug -mode blank, I will get results in the screenshot attached above. Note that in the middle of the black xlock window, there is the second password prompt (密码 in Chinsese). And there is a popup window which asks for authorization by FPrint. I think this might be a problem with polkit on computers with fingerprint device. Is it so? There is one more wired thing. My default locale is Chineses (zh_CN.UTF-8), and when I execute LANG=C xlock -debug -mode blank the popup window will never show up. Currently I am using this method to walkaround the issue...
Problem persists in Fedora 20. Even worse: if xlock is started from another display in a dual-head configuration (e.g. DISPLAY=:0.1), then xlock always fails to unlock the screen after 60 seconds of (failed) password validation.
P.S.: this is a regression since xlock was working perfectly with Fedora 18
Created attachment 840377 [details] xlock never unlocks from :0.1 When started from any DISPLAY other than :0.0 using a non-US locale (e.g.: LANG=fr_FR.utf8, LANG=ja_JP.utf8, etc.), xlock does not show the second password prompt and thus never unlocks.
Bug fix was trivial: a compilation flag was missing on Fedora 19 and 20 builds. Patch attached, and a test build is available here: http://koji.fedoraproject.org/koji/taskinfo?taskID=6326814 Source RPM: http://kojipkgs.fedoraproject.org/work/tasks/6815/6326815/xlockmore-5.43-4.fc20.src.rpm Build for armv7hl architecture: http://kojipkgs.fedoraproject.org/work/tasks/6815/6326815/xlockmore-5.43-4.fc20.armv7hl.rpm Build for i686 architecture: http://kojipkgs.fedoraproject.org/work/tasks/6817/6326817/xlockmore-5.43-4.fc20.i686.rpm Build for x86_64 architecture: http://kojipkgs.fedoraproject.org/work/tasks/6816/6326816/xlockmore-5.43-4.fc20.x86_64.rpm
Created attachment 840511 [details] Proposed fix for bug #991010
xlockmore-5.43-4.fc19 has been submitted as an update for Fedora 19. https://admin.fedoraproject.org/updates/xlockmore-5.43-4.fc19
Thanks for the patch. Applied.
xlockmore-5.43-4.fc20 has been submitted as an update for Fedora 20. https://admin.fedoraproject.org/updates/xlockmore-5.43-4.fc20
Package xlockmore-5.43-4.fc19: * should fix your issue, * was pushed to the Fedora 19 testing repository, * should be available at your local mirror within two days. Update it with: # su -c 'yum update --enablerepo=updates-testing xlockmore-5.43-4.fc19' as soon as you are able to. Please go to the following url: https://admin.fedoraproject.org/updates/FEDORA-2013-23949/xlockmore-5.43-4.fc19 then log in and leave karma (feedback).
Thanks for the update. I can confirm it is fixed.
Same problem with xlockmore-5.43-1.el6 from EPEL 6. Could also you update them, or should I create a new ticket?
xlockmore-5.43-4.el6 has been submitted as an update for Fedora EPEL 6. https://admin.fedoraproject.org/updates/xlockmore-5.43-4.el6
xlockmore-5.43-4.fc19 has been pushed to the Fedora 19 stable repository. If problems still persist, please make note of it in this bug report.
xlockmore-5.43-4.fc20 has been pushed to the Fedora 20 stable repository. If problems still persist, please make note of it in this bug report.
xlockmore-5.43-4.el6 has been pushed to the Fedora EPEL 6 stable repository. If problems still persist, please make note of it in this bug report.