Strange behaviour - possibility to bypass the password

**aleopo** · 06-Feb-2010, 03:22

I have noticed a strange behaviour after screen lock. The system, according to settings, should ask for password before switching on again.
Now, if you press many time in serious the button "UNLOCK" it goes on WITHOUT PASSWORD given.
Moreover the system stops to ask for password by next screen locks or hibernations as long as you do not log off the user.

Is it a bug or I did mistake in settings?

System OpenSuse 11.2 with Gnome

**ramaswamyps** · 06-Feb-2010, 04:28

did you probably installed for automatic login?
without a passwd.

**aleopo** · 06-Feb-2010, 04:45

absolutely not. The system should require password at login. And it does. I never tried myself to do it this way. I left the computer on the table for some time, the screen automatically locked and then my son, who did not know the password, wanted to do something. He could not log into the system so he started to play with "unlock" button. After several presses the system unlocked itself. I could not believe him, so he presented it to me once again. He proved me the way to bypass the password.

**ramaswamyps** · 06-Feb-2010, 04:54

check screen saver settings.
i did not find any such problems.
then i am running it in desktop computer.

**aleopo** · 06-Feb-2010, 05:11

I use it on my laptop. Screensaver is Compass.
Both options:
- start the screensaver when computer not active
- lock the screen when screensaver is active
are checked.
The screensaver starts after 5 minuts.

**aleopo** · 06-Feb-2010, 06:14

but you were right. It seems to be related to screensaver. If I lock the screen from menu this bypass does not work. It works only by unlocking from screensaver.

**Wilson_Phillips** · 06-Feb-2010, 07:11

Does it do it with a different screensaver?

**gogalthorp** · 06-Feb-2010, 09:27

First which GUI?

Second you have replaced the default screen saver with one that was originally designed for Windows. Are you sure you did it right? Are you sure that Compass actually does a real logout?

**Wilson_Phillips** · 06-Feb-2010, 09:57

Originally Posted by gogalthorp

First which GUI?

Second you have replaced the default screen saver with one that was originally designed for Windows. Are you sure you did it right? Are you sure that Compass actually does a real logout?

O.K. So that's why I couldn't find it in my screensavers to test it.

**aleopo** · 06-Feb-2010, 13:23

I checked also other screensavers. The same. Finally I deactivated the screensaver when computer was idle and locked the screen from menu.
This time it needed longer series of clicks, but again after some 20-30 clicks, one immediately after other, I managed to unlock the system!