Unable to open anything that requires root password from GUI!

I previously had this issue (never solved) on this desktop computer with openSUSE 12.1. When I first installed that OS, everything worked but at some point I was suddenly unable to open anything from the kickoff menu (like Windows’ Start Menu) that required a password. Instead the password box would simply close and nothing would happen (if I entered the wrong password, it would show that error).

You can see that here: https://forums.opensuse.org/english/get-technical-help-here/applications/470492-yast-wont-open-up-when-opened-kickoff-menu.html

So I created a VirtualBox install on that same computer and installed openSUSE 12.3. Again, everything worked at first but now I’m getting the same issue! Inside VirtualBox!

The HOST computer info:

HARDWARE: Acer Aspire X1470-UR30P Specs (A4 series A4-3400 2.7 GHz) - Desktops - CNET Reviews

Processor (CPU): AMD A4-3400 APU with Radeon™ HD Graphics
OS: Linux 3.1.10-1.29-desktop x86_64
System: openSUSE 12.1 (x86_64)
KDE: 4.8.5 (4.8.5) “release 522”
Total memory (RAM): 11.5 GiB
Free memory: 5.8 GiB (+ 2.8 GiB Caches)
Free swap: 3.8 GiB

The GUEST computer info:
OS: Linux 3.7.10-1.16-desktop x86_64
System: openSUSE 12.3 (x86_64)
KDE: 4.10.5 “release 1”

What could be happening? Is it this computer’s hardware?

I doubt a hardware problem since you see the same in a VM so it must be some configuration you are setting or program you are installing. So far no one else is reporting this.

I didn’t install anything in the virtualbox version. I simply installed it and then did a “zypper up”

I’m not sure about that:

https://forums.opensuse.org/english/get-technical-help-here/applications/429476-kdesu-not-working-opensuse-11-2-a.html

https://bugzilla.novell.com/show_bug.cgi?id=693109

Google Translate

http://forums.opensuse.org/deutsch-german/hilfe-und-helfen/installation-administration/470113-yast-la-sst-sich-im-user-account-nicht-starten-opensuse-12-1-a.html

I think I finally found the answer!!!

New: kdesu crashes when root password contains the character " - opensuse-bugs.opensuse.org - ArchiveOrange

kdesu crashes when root password contains the character "

My passwords both have a quote character in them! Could this be the issue? What’s the fix (is there one aside from changing the password)?

THAT DID IT!!! I removed the quote character from the password and now I can launch root items from the kickoff menu! This has been a headache for two years but now it’s “solved”. BIG thanks to Anthony Accioly who reported the bug!

On 2013-12-05 08:26, 6tr6tr wrote:
>
> 6tr6tr;2605388 Wrote:
>> I think I finally found the answer!!!
>>
>> ‘New: kdesu crashes when root password contains the character " -
>> opensuse-bugs.opensuse.org - ArchiveOrange’
>> (http://web.archiveorange.com/archive/v/wmeLDEVxjALyygyaeoWg)
>>
>
> THAT DID IT!!! I removed the quote character from the password and now I
> can launch root items from the kickoff menu! This has been a headache
> for two years but now it’s “solved”. BIG thanks to Anthony Accioly who
> reported the bug!

Interesting.


Cheers / Saludos,

Carlos E. R.
(from 12.3 x86_64 “Dartmouth” at Telcontar)

Carlos E. R. wrote:
> On 2013-12-05 08:26, 6tr6tr wrote:
>> 6tr6tr;2605388 Wrote:
>>> I think I finally found the answer!!!
>>>
>>> ‘New: kdesu crashes when root password contains the character " -
>>> opensuse-bugs.opensuse.org - ArchiveOrange’
>>> (http://web.archiveorange.com/archive/v/wmeLDEVxjALyygyaeoWg)
>>>
>> THAT DID IT!!! I removed the quote character from the password and now I
>> can launch root items from the kickoff menu! This has been a headache
>> for two years but now it’s “solved”. BIG thanks to Anthony Accioly who
>> reported the bug!
>
> Interesting.

The bug is actually:

https://bugzilla.novell.com/show_bug.cgi?id=837959

I’m not too familiar with how the bugzilla works, but that bug is
against 12.3 and has a status of New. Does something need to be done to
it to get the bug fixed?

The bug is presumably a bit of sloppy script writing that doesn’t allow
arbitrary characters in passwords. I remember when novell insisted on
7-bit ASCII only, but even that would have allowed a double-quote character!

On 2013-12-05 11:58, Dave Howorth wrote:

> The bug is actually:
>
> https://bugzilla.novell.com/show_bug.cgi?id=837959
>
> I’m not too familiar with how the bugzilla works, but that bug is
> against 12.3 and has a status of New. Does something need to be done to
> it to get the bug fixed?

Add me too’s. :slight_smile:


Cheers / Saludos,

Carlos E. R.
(from 12.3 x86_64 “Dartmouth” at Telcontar)

It seems to me to be a possible exploit waiting to happen. The input should have been sanitized, but it appears not to be.

You are very welcome. Actually I never reported a bug for openSUSE before. I can confirm that this is still an issue in version 13.1.
I’ve updated the issue tracker accordingly. Still, no lucky attracting developers to fix the bug (while I’m a developer myself I have zero experience with this kind of development).

If someone with more experience have any suggestions about how I can call attention to this bug (or even fix it) I would be glad to help.

Is it an opensuse or kde bug?

openSUSE, I have other KDE distros running fine.