[Bug 1606898] [NEW] libpam-ccreds recognizes cached password but cannot login

[Darragh Bailey]

Public bug reported:

Firstly, I'm not entire certain this bug is in libpam-ccreds, as it may
be approving the login and another component is failing to continue. But
it seems like a reasonable starting point since installing and enabling
cached credentials isn't working as expected.


Description:	Ubuntu 16.04 LTS
Release:	16.04

apt-cache policy libpam-ccreds 
libpam-ccreds:
  Installed: 10-6build1
  Candidate: 10-6build1
  Version table:
 *** 10-6build1 500
        500 http://ie.archive.ubuntu.com/ubuntu xenial/universe amd64 Packages
        100 /var/lib/dpkg/status


I've configure my workstation to authenticate against the corporate active directory, using kerberos and winbind. Additionally I've enabled "cached credentials password saving" and "cached credentials password checking" via pam-auth-update. 


Expected behaviour

After boot up
Graphical login greeter appears
Use Active Directory username and password
System determines domain controller is not yet reachable to authenticate
Checks cached credentials
Password matches and message appears "You have been logged on using cached credentials"
Button "Log in" appears
Click "Log in" to continue and desktop appears


Actual behaviour

After boot up
Graphical login greeter appears
Use Active Directory username and password
System determines domain controller is not yet reachable to authenticate
Checks cached credentials
Password matches and message appears "You have been logged on using cached credentials"
Text box asking for username appears and cannot continue. (see attached picture)
Wait 1 minute and retry username and password
Login succeeds as now able to auth against remote server
Desktop appears

** Affects: pam (Ubuntu)
     Importance: Undecided
         Status: New

** Attachment added: "photo of message"
   https://bugs.launchpad.net/bugs/1606898/+attachment/4708114/+files/cached_creds.jpg

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to pam in Ubuntu.
https://bugs.launchpad.net/bugs/1606898

Title:
  libpam-ccreds recognizes cached password but cannot login

Status in pam package in Ubuntu:
  New

Bug description:
  Firstly, I'm not entire certain this bug is in libpam-ccreds, as it
  may be approving the login and another component is failing to
  continue. But it seems like a reasonable starting point since
  installing and enabling cached credentials isn't working as expected.

  
  Description:	Ubuntu 16.04 LTS
  Release:	16.04

  apt-cache policy libpam-ccreds 
  libpam-ccreds:
    Installed: 10-6build1
    Candidate: 10-6build1
    Version table:
   *** 10-6build1 500
          500 http://ie.archive.ubuntu.com/ubuntu xenial/universe amd64 Packages
          100 /var/lib/dpkg/status

  
  I've configure my workstation to authenticate against the corporate active directory, using kerberos and winbind. Additionally I've enabled "cached credentials password saving" and "cached credentials password checking" via pam-auth-update. 

  
  Expected behaviour

  After boot up
  Graphical login greeter appears
  Use Active Directory username and password
  System determines domain controller is not yet reachable to authenticate
  Checks cached credentials
  Password matches and message appears "You have been logged on using cached credentials"
  Button "Log in" appears
  Click "Log in" to continue and desktop appears

  
  Actual behaviour

  After boot up
  Graphical login greeter appears
  Use Active Directory username and password
  System determines domain controller is not yet reachable to authenticate
  Checks cached credentials
  Password matches and message appears "You have been logged on using cached credentials"
  Text box asking for username appears and cannot continue. (see attached picture)
  Wait 1 minute and retry username and password
  Login succeeds as now able to auth against remote server
  Desktop appears

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/pam/+bug/1606898/+subscriptions