Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

No prompt for password on wake #9

Open
aidalgol opened this issue Sep 30, 2016 · 5 comments
Open

No prompt for password on wake #9

aidalgol opened this issue Sep 30, 2016 · 5 comments

Comments

@aidalgol
Copy link

aidalgol commented Sep 30, 2016

When I "sleep" my PocketCHIP and then wake it by either tapping the screen or hitting the home button, I get the login screen but without a password prompt.
login screen
So I can just hit the "Log In" button without having to enter a password, and it lets me in.

I'm running 0.0.8.9 from the .deb package.

@o-marshmallow
Copy link
Owner

o-marshmallow commented Sep 30, 2016

Hello @aidalgol,

Do you have a password field on startup but not on sleep ? Or both don't show a password prompt ?
Did you set a password ?

When you press "Sleep", a new lockscreen is created, it checks whether the file /home/chip/.pocket-home/.passwd/passwd exists or not. If not, it means there is no password, so no need to show the password prompt.

EDIT: From what I see on the picture, the screen is correct, do you mean even if you write nothing, it works ?

@aidalgol
Copy link
Author

aidalgol commented Oct 2, 2016

I have no password prompt at all, on startup or (wake from) sleep. On wake, I get the screen in my original post but without the password prompt; I just took the screenshot from your thread on the NTC forums. (Sorry, I should have made that clearer.)

There is no such file /home/chip/.pocket-home/.passwd/passwd, probably because I set a password through the command-line program passwd, not through the GUI. Detecting whether the user has a password set by looking for a file in the home directory seems wrong. As far as I know, screen-locking programs like xscreensaver and i3lock use PAM for authentication. Is pocket-home (your fork, that is), actually storing/expecting a password in /home/chip/.pocket-home/.passwd/passwd separately from the user's password (as in /etc/shadow)?

@o-marshmallow
Copy link
Owner

@aidalgol, I understand what you mean, the fact is pocket-home isn't really a window manager like xfce or kde, it's a program inside Awesome Window Manager. You can see it because even if you don't enter the pocket-home password, you can still have an SSH access to your PocketCHIP. That's why I decide to use a custom (private) password for the home. You can set it in Advanced Settings. The password is hashed and saved in the file I told you and owned by root (same for the containing folder) so it's not possible to edit the password file or remove it for a non-root user

@ghost
Copy link

ghost commented Oct 31, 2016

I realize that is not directly related, but now that I have a password for pocket-home, my screen times out. This is an undesired behavior for my use case. Is the timeout time easy to adjust, as well as fully turn off?

@ghost
Copy link

ghost commented Nov 2, 2016

For now I just removed the /home/chip/.pocket-home/.passwd/passwd file to revert back to pre-window manager password state.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants