Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

authentication_agent_initiate_challenge potentially duplicates user_identities #542

Open
hsitter opened this issue Jan 14, 2025 · 1 comment

Comments

@hsitter
Copy link

hsitter commented Jan 14, 2025

Describe the bug
The same users (as per its hash and equal function) may appear multiple times in the identities list sent to authenticators. This appears to be the result of authentication_agent_initiate_challenge operating on a GList and not checking for duplicates nor running a uniqueness function on the result.

To Reproduce
Kinda terrible to reproduce but I've seen this across multiple distros

  1. on arch linux with kde plasma
  2. systemsettings kcm_users
  3. create new admin user
  4. pkexec ls

Expected behavior
Every user appears once

Screenshots
Screenshot_20250114_030410

Desktop (please complete the following information):

  • OS (including version): KDE Linux 202501060256
  • Desktop Environment [Gnome, KDE, ...]: KDE Plasma Version: 6.2.80
  • Version of polkit: git main
@sbijendra
Copy link

sbijendra commented Jan 20, 2025

Recently, we also upgraded our ubuntu version to 24.04 and looks like we are also seeing the same problem now where we are seeing multiple admin users while doing a restart on some service. We are seeing admin user 2 times as admin user is part of both admin and sudo group in our use case.
`Multiple identities can be used for authentication:

  1. admin
  2. xyz
  3. admin
    Choose identity to authenticate as (1-3)`

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants