GNOME Bugzilla – Bug 758571
Don't override prompt from PAM when setting a new password
Last modified: 2016-01-12 22:30:33 UTC
During the PAM authorize step, if pam_acct_mgmt returns PAM_NEW_AUTHTOK_REQD, gdm displays the message "Your password has expired, please change it now." But pam_unix has already displayed the message "You are required to change your password immediately (root enforced)." This causes the message from PAM to flash very briefly on the screen, then be replaced by the message from gdm. The user will be confused by the disappearing message. I don't think there's any value in gdm presenting its own message here, since the message from PAM is fine. I guess it could be useful only if there is some hypothetical situation where PAM might not prompt, but I think that would be a bug in PAM, right?
Created attachment 316127 [details] [review] session-worker: Don't override prompt from PAM when setting new password During the PAM authorize step, if pam_acct_mgmt returns PAM_NEW_AUTHTOK_REQD, gdm displays the message "Your password has expired, please change it now." But pam_unix has already displayed the message "You are required to change your password immediately (root enforced)." This causes the message from PAM to flash very briefly on the screen, then be replaced by the message from gdm. The user will be confused by the disappearing message. There's no value in gdm presenting its own message here, since the message from PAM is fine.
Attachment 316127 [details] pushed as 0113cec - session-worker: Don't override prompt from PAM when setting new password
*** Bug 745081 has been marked as a duplicate of this bug. ***