FS#67688 - [pam] Spurious "password expiry" messages for non-local accounts

Attached to Project: Arch Linux
Opened by Mantas Mikulėnas (grawity) - Sunday, 23 August 2020, 12:41 GMT
Last edited by Tobias Powalowski (tpowa) - Saturday, 14 November 2020, 08:46 GMT
Task Type Bug Report
Category Packages: Core
Status Closed
Assigned To Tobias Powalowski (tpowa)
Architecture All
Severity Low
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 2
Private No

Details

For LDAP accounts (which do not have a 'shadow' entry), the pam_unix module in v1.4.0 reads uninitialized memory and shows a warning that "Your password will expire in 0 days" or "32767 days" or something equally bogus.

Please backport commit db6b293046aee4735f3aa2d1713742ed4b533219 ("Fix missing initialization of daysleft") to fix this issue.
This task depends upon

Closed by  Tobias Powalowski (tpowa)
Saturday, 14 November 2020, 08:46 GMT
Reason for closing:  Fixed
Additional comments about closing:  1.5.0-1
Comment by Bob Arctor (oduesp) - Wednesday, 26 August 2020, 12:04 GMT
Affected by this as well. Can't login. Great... :(
Comment by Manhong Dai (daimh) - Friday, 25 September 2020, 13:42 GMT
Confirmed.

[root@home-3 ~]# su - daimh
Warning: your password will expire in 32687 days.
[daimh@home-3 ~]$ logout
[root@home-3 ~]# su - daimh
Warning: your password will expire in 32696 days.
[daimh@home-3 ~]$ logout
[root@home-3 ~]# su - daimh
Warning: your password will expire in 32648 days.
[daimh@home-3 ~]$ logout
[root@home-3 ~]# su - daimh
Warning: your password will expire in 32706 days.
Comment by Thomas Reim (rdratlos) - Wednesday, 04 November 2020, 17:55 GMT
Attached patch that was proposed by https://bugs.archlinux.org/user/6005 fixes this annoying issue.

Tested on ManjaroLinux 20.1.1 using patched Arch Linux pam 1.4.0-3 sources from Github.

Loading...