Breaks with smart card auth with pkcs11

Bug #1031034 reported by Jonathan Davies
12
This bug affects 2 people
Affects Status Importance Assigned to Milestone
GNOME Settings Daemon
Fix Released
Critical
gnome-settings-daemon (Ubuntu)
Fix Released
Low
Unassigned
Precise
Fix Released
High
Unassigned

Bug Description

For some reason, after enabling smart card authentication with pkcs11. gnome-settings-daemon would segfault, while looking for:

open("/usr/lib/pkcs11/libcoolkeypk11.so", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)

Because of the segfault, it would take up to ~15 seconds for the desktop to load after LightDM finised.

Installing the coolkey package (in universe), fixes these problems.

Revision history for this message
Sebastien Bacher (seb128) wrote :

Thank you for your bug report:

- what version of Ubuntu do you use?
- how did you enable smart card authentification?
- could you get a stacktrace of the segfault with gdb?

Changed in gnome-settings-daemon (Ubuntu):
status: New → Incomplete
importance: Undecided → Low
Revision history for this message
Jonathan Davies (jpds) wrote :

This is on 12.04 LTS.

Authentication is enabled with "auth [success=3 default=ignore] pam_pkcs11.so" in /etc/pam.d/common-auth.

Stacktrace is:

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0x7fffd8a0d700 (LWP 21541)]
0x00007fffd9c27921 in SECMOD_WaitForAnyTokenEvent () from /usr/lib/x86_64-linux-gnu/libnss3.so
(gdb) bt
#0 0x00007fffd9c27921 in SECMOD_WaitForAnyTokenEvent () from /usr/lib/x86_64-linux-gnu/libnss3.so
#1 0x00007fffd9ee83e4 in gsd_smartcard_manager_worker_watch_for_and_process_event (error=0x7fffd8a0cc50, worker=0x793240) at gsd-smartcard-manager.c:1251
#2 gsd_smartcard_manager_worker_run (worker=0x793240) at gsd-smartcard-manager.c:1381
#3 0x00007ffff68f39e5 in ?? () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
#4 0x00007ffff6674e9a in start_thread () from /lib/x86_64-linux-gnu/libpthread.so.0
#5 0x00007ffff63a24bd in clone () from /lib/x86_64-linux-gnu/libc.so.6
#6 0x0000000000000000 in ?? ()
(gdb)

Changed in gnome-settings-daemon (Ubuntu):
status: Incomplete → Confirmed
Revision history for this message
Michael Terry (mterry) wrote :

I committed a fix upstream. Will patch Ubuntu too.

Michael Terry (mterry)
Changed in gnome-settings-daemon (Ubuntu):
status: Confirmed → Fix Committed
Changed in gnome-settings-daemon:
importance: Unknown → Critical
status: Unknown → Fix Released
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package gnome-settings-daemon - 3.4.2-0ubuntu9

---------------
gnome-settings-daemon (3.4.2-0ubuntu9) quantal-proposed; urgency=low

  [ Sebastien Bacher ]
  * debian/control.in:
    - don't build-depends on gconf
    - updated gnome-control-center breaks version for gsettings
  * debian/patches/revert_git_a11y_gsettings.patch,
    debian/patches/revert_git_stop_using_gconf.patch,
    debian/patches/revert_git_use_gsetting_keybindings.patch:
    - drop the gconf to gsettings migration reverts (LP: #1035261)

  [ Keng-Yu Lin ]
  * debian/patches/git-mask-out-virtual-modifiers.patch
    - patch from upstream git, fix the grabbing issue of the
      keyboard shortcut with virtual (Super, Hyper, Meta) modifier.
      (lp: #950160)

  [ Edward Donovan ]
  * debian/source_gnome-settings-daemon.py: Fix for Python 3. (LP: #1013171)

  [ Hsin-Yi, Chen (hychen) ]
  * debian/patches/git_xrandr_explicitly_set_clone_state.patch:
    - "xrandr; explicitly set clone state variable when generating monitor
      configs" (LP: #1014533)

  [ Michael Terry ]
  * debian/patches/git-smartcard-crash.patch:
    - Don't crash on login with a smartcard (LP: #1031034)
 -- Sebastien Bacher <email address hidden> Thu, 23 Aug 2012 17:04:16 +0200

Changed in gnome-settings-daemon (Ubuntu):
status: Fix Committed → Fix Released
Changed in gnome-settings-daemon (Ubuntu Precise):
importance: Undecided → High
status: New → Triaged
Revision history for this message
Ritesh Khadgaray (khadgaray) wrote :

[Impact]

  For some reason, after enabling smart card authentication with pkcs11. gnome-settings-daemon would segfault. This is affecting the feel of Ubuntu for a large customer.

[Regression Potential]
 * very minimal regression potential.

[Other Info]

 * The patch is a taken from quantal ( which in turn is from upstream), and merges in beautifully.

Revision history for this message
Sebastien Bacher (seb128) wrote :

Thanks Ritesh, I've rebased on the current version which is in proposed and uploaded to the queue where it's waiting for review from the SRU team next

Changed in gnome-settings-daemon (Ubuntu Precise):
status: Triaged → In Progress
Revision history for this message
Colin Watson (cjwatson) wrote : Please test proposed package

Hello Jonathan, or anyone else affected,

Accepted gnome-settings-daemon into precise-proposed. The package will build now and be available at http://launchpad.net/ubuntu/+source/gnome-settings-daemon/3.4.2-0ubuntu0.6.2 in a few hours, and then in the -proposed repository.

Please help us by testing this new package. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Your feedback will aid us getting this update out to other Ubuntu users.

If this package fixes the bug for you, please add a comment to this bug, mentioning the version of the package you tested, and change the tag from verification-needed to verification-done. If it does not fix the bug for you, please add a comment stating that, and change the tag to verification-failed. In either case, details of your testing will help us make a better decision.

Further information regarding the verification process can be found at https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in advance!

Changed in gnome-settings-daemon (Ubuntu Precise):
status: In Progress → Fix Committed
tags: added: verification-needed
Revision history for this message
Jonathan Davies (jpds) wrote :

Package in proposed verified.

tags: added: verification-done
removed: verification-needed
Revision history for this message
Colin Watson (cjwatson) wrote : Update Released

The verification of this Stable Release Update has completed successfully and the package has now been released to -updates. Subsequently, the Ubuntu Stable Release Updates Team is being unsubscribed and will not receive messages about this bug report. In the event that you encounter a regression using the package from -updates please report a new bug using ubuntu-bug and tag the bug report regression-update so we can easily find any regresssions.

Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package gnome-settings-daemon - 3.4.2-0ubuntu0.6.2

---------------
gnome-settings-daemon (3.4.2-0ubuntu0.6.2) precise; urgency=low

  * debian/patches/git-smartcard-crash.patch:
    - gnome-settings-daemon segfaults when using smartcard authentication
      (lp: #1031034)
 -- Ritesh Khadgaray <email address hidden> Thu, 10 Jan 2013 17:23:56 +0530

Changed in gnome-settings-daemon (Ubuntu Precise):
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.