Open
Conversation
`UpdateUser` unconditionally reset the user record's primary GID to the user's UID on every login, silently reverting GID changes made via `authctl group set-gid`. The group record itself kept the correct GID, causing `getent passwd` and `getent group` to diverge.
We've seen cases in e2e-tests where device auth took longer than 2 minutes to complete. When it finally succeeds, the login fails because the subsequent SetData(authenticationBrokerIDKey, ...) call fails: failed to call com.ubuntu.authd.pam.SetData: dbus: connection closed by user LOGIN: exiting with error System error: dbus: connection closed by user We don't to enforce a timeout for the login procedure here. If there should be a timeout, it should be the caller who enforces it - similar to the behavior of `login`which is configured via LOGIN_TIMEOUT in /etc/login.defs.
Currently, Ctrl-D has no effect when authd-pam is used. Usually, when typing Ctrl-D in a terminal, the input buffer to the reading process is flushed, and, if the buffer is empty, EOF is sent. With sudo the expected behavior is that it doesn't ask for a password again if an empty password was submitted via Ctrl-D. This commit implements that behavior.
Agent-Logs-Url: https://github.com/canonical/authd/sessions/e87699dd-0a45-47c8-ba3e-23f2c57c2b9c Co-authored-by: adombeck <18482300+adombeck@users.noreply.github.com>
On 32-bit architectures, math.MaxInt32 + 1 is larger than the int type, so it causes the test to fail with cmd/authctl/group/set-gid_test.go:52:65: cannot use math.MaxInt32 + 1 (untyped int constant 2147483648) as int value in argument to strconv.Itoa (overflows) The fix is to use an int64 instead. refs: https://bugs.launchpad.net/ubuntu/+source/authd/+bug/2148363
denisonbarbosa
approved these changes
Apr 23, 2026
Codecov Report❌ Patch coverage is
Additional details and impacted files@@ Coverage Diff @@
## stable #1486 +/- ##
==========================================
+ Coverage 85.56% 85.61% +0.05%
==========================================
Files 119 119
Lines 7674 7681 +7
Branches 111 111
==========================================
+ Hits 6566 6576 +10
+ Misses 1052 1049 -3
Partials 56 56 ☔ View full report in Codecov by Sentry. 🚀 New features to boost your workflow:
|
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Uh oh!
There was an error while loading. Please reload this page.