CentOS - Apr 2015 - CentOS 7.1 user login screen can't scroll up/down

Liam O'Toole wrote:
> On 2015-04-09, Ole Holm Nielsen
> <Ole.H.Nielsen at fysik.dtu.dk> wrote:
>> After we upgraded our CentOS 7.0 desktops to CentOS 7.1, a critical
>> error in the graphical login screen has appeared on all 7.1 machines:
>>
>> We have 100+ users defined in /etc/passwd, and a list of names is
>> presented on the initial login screen.  However, it's impossible to
>> scroll up or down in this user list to select the desired user.  The
>> middle mouse button seems to be disabled, so scrolling has become
>> impossible!  One can use the left and right mouse buttons to select
>> one of the users in view, but no one else.
>>
>> This seems definitely to be a critical bug in CentOS 7.1.
<snip>
Isn't there a way to open a box for "other user"?
> 3. Disable the user list:
>
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/Desktop_Migration_and_Administration_Guide/customizing-login-screen.html
This, in fact, *is* the correct answer. That it's enabled is bad.

1. Security. Having the username, which someone being nasty wants to
     break into, but doesn't know it, this is just that much easier.
2. You have over 100 users. That's annoying to scroll through. Certainly,
     each user *ought* to know their own username, and it's faster to
     type it in, than scroll down 5 or so names at a time through 100+.
3. See 1.

         mark

> Isn't there a way to open a box for "other user"?
>
>> 3. Disable the user list:
>>
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/Desktop_Migration_and_Administration_Guide/customizing-login-screen.html
>
> This, in fact, *is* the correct answer. That it's enabled is bad.
>
> 1. Security. Having the username, which someone being nasty wants to
>      break into, but doesn't know it, this is just that much easier.
> 2. You have over 100 users. That's annoying to scroll through.
Certainly,
>      each user *ought* to know their own username, and it's faster to
>      type it in, than scroll down 5 or so names at a time through 100+.
> 3. See 1.
Good point.  I never liked the user list anyway.  Wonder why the RHEL 7 
designers chose to add it?

/Ole

On 04/09/2015 09:51 AM, Ole Holm Nielsen wrote:
>> Isn't there a way to open a box for "other user"?
>>
>>> 3. Disable the user list:
>>>
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/Desktop_Migration_and_Administration_Guide/customizing-login-screen.html
>>>
>>
>> This, in fact, *is* the correct answer. That it's enabled is bad.
>>
>> 1. Security. Having the username, which someone being nasty wants to
>>      break into, but doesn't know it, this is just that much
easier.
>> 2. You have over 100 users. That's annoying to scroll through.
Certainly,
>>      each user *ought* to know their own username, and it's faster
to
>>      type it in, than scroll down 5 or so names at a time through 100+.
>> 3. See 1.
> 
> Good point.  I never liked the user list anyway.  Wonder why the RHEL 7
> designers chose to add it?
Likely because it is in Fedora and they did not take it out, and it is
likely the default from the GNOME project as well.

To each, their own preference.


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: OpenPGP digital signature
URL:
<http://lists.centos.org/pipermail/centos/attachments/20150409/0dbd3a59/attachment-0001.sig>

On Thu, Apr 09, 2015 at 10:23:19AM -0400, m.roth at 5-cent.us wrote:
> > 3. Disable the user list:
> >
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/Desktop_Migration_and_Administration_Guide/customizing-login-screen.html
> 
> This, in fact, *is* the correct answer. That it's enabled is bad.
> 
> 1. Security. Having the username, which someone being nasty wants to
>      break into, but doesn't know it, this is just that much easier.
> 2. You have over 100 users. That's annoying to scroll through.
Certainly,
>      each user *ought* to know their own username, and it's faster to
>      type it in, than scroll down 5 or so names at a time through 100+.
> 3. See 1.
Pretty sure that Alan filed a bug against RH with this, but, as RH seems to
do these days when sysadmins complain about Fedora-isms, it was probably
ignored.  

Merrily trolling,


-- 
Scott Robbins
PGP keyID EB3467D6
( 1B48 077D 66F6 9DB0 FDC2 A409 FA54 EB34 67D6 )
gpg --keyserver pgp.mit.edu --recv-keys EB3467D6

On Thu, Apr 9, 2015 at 8:13 AM, Scott Robbins <scottro at nyc.rr.com>
wrote:
> On Thu, Apr 09, 2015 at 10:23:19AM -0400, m.roth at 5-cent.us wrote:
>
>> > 3. Disable the user list:
> Pretty sure that Alan filed a bug against RH with this, but, as RH seems to
> do these days when sysadmins complain about Fedora-isms, it was probably
> ignored.
>
> Merrily trolling,
If trolling, you should have quoted my blog:

http://blog.toracat.org/2011/01/gnome-login-shows-all-valid-user-accounts-disable-it/
(shameless advertisement)

Akemi  ;-)

Aside from the annoyance of having all local users listed on the login 
screen we have noticed with CentOS7 using NIS and NFS home directories 
that once a user authenticates their home directory is automatically 
mounted on boot, even after rebooting and disabling the list using

echo "[org/gnome/login-screen]
disable-user-list=true" > /etc/dconf/db/gdm.d/01-local-settings
&& dconf
update

is this a separate issue with our NFS server or is this related to the 
userlist?

thanks

Michael

On 09/04/15 15:23, m.roth at 5-cent.us wrote:
> Liam O'Toole wrote:
>> On 2015-04-09, Ole Holm Nielsen
>> <Ole.H.Nielsen at fysik.dtu.dk> wrote:
>>> After we upgraded our CentOS 7.0 desktops to CentOS 7.1, a critical
>>> error in the graphical login screen has appeared on all 7.1
machines:
>>>
>>> We have 100+ users defined in /etc/passwd, and a list of names is
>>> presented on the initial login screen.  However, it's
impossible to
>>> scroll up or down in this user list to select the desired user. 
The
>>> middle mouse button seems to be disabled, so scrolling has become
>>> impossible!  One can use the left and right mouse buttons to select
>>> one of the users in view, but no one else.
>>>
>>> This seems definitely to be a critical bug in CentOS 7.1.
> <snip>
> Isn't there a way to open a box for "other user"?
>
>> 3. Disable the user list:
>>
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/Desktop_Migration_and_Administration_Guide/customizing-login-screen.html
>
> This, in fact, *is* the correct answer. That it's enabled is bad.
>
> 1. Security. Having the username, which someone being nasty wants to
>       break into, but doesn't know it, this is just that much easier.
> 2. You have over 100 users. That's annoying to scroll through.
Certainly,
>       each user *ought* to know their own username, and it's faster to
>       type it in, than scroll down 5 or so names at a time through 100+.
> 3. See 1.
>
>           mark
>
> _______________________________________________
> CentOS mailing list
> CentOS at centos.org
> http://lists.centos.org/mailman/listinfo/centos
>