Can't auth against U1 in g-s

Bug #1616943 reported by Will Cooke
376
This bug affects 93 people
Affects Status Importance Assigned to Milestone
GNOME Software
New
Undecided
Unassigned
gnome-software (Ubuntu)
Fix Released
Critical
Robert Ancell
Xenial
Fix Released
Critical
Robert Ancell
Yakkety
Fix Released
Critical
Unassigned
snapd-glib (Ubuntu)
Fix Released
Critical
Robert Ancell
Xenial
Fix Released
Critical
Robert Ancell

Bug Description

[Impact]
Authentication using Ubuntu One credentials to install/remove snaps always fails. This is due to a behaviour change in snapd (no longer accepts login requests from non-root users). Existing credentials continue to work.

[Test Case]
1. Delete any existing credentials by deleting passwords marked "com.ubuntu.UbuntuOne.GnomeSoftware" using Seahorse.
2. Start GNOME Software
3. Search for a snap (e.g. "moon-buggy")
4. Install Snap
5. Enter Ubuntu One credentials when prompted

Observed result:
Dialog says "Incorrect email or password".

Expected result:
Authentication completes and the snap is installed.

[Regression Potential]
The solution is to use a new D-Bus service (snapd-login-service) and new library (snapd-glib) to get the Macaroon from snapd. This has some risk of introducing new bugs. The change is minimised (other snapd code paths unchanged) and the alternative is login to be impossible.

Will Cooke (willcooke)
Changed in gnome-software (Ubuntu):
assignee: nobody → Robert Ancell (robert-ancell)
Revision history for this message
Sebastien Bacher (seb128) wrote :

confirmed on current xenial...

Changed in gnome-software (Ubuntu):
importance: Undecided → High
Revision history for this message
Sebastien Bacher (seb128) wrote :

discussed on IRC, new snapd requires to use sudo to login so gnome-software needs to be updated (it doesn't if you are still loged in though, which made some not able to reproduce using "snap login <email>" until you snap logout)

Changed in gnome-software (Ubuntu Xenial):
importance: Undecided → High
assignee: nobody → Robert Ancell (robert-ancell)
Revision history for this message
Robert Ancell (robert-ancell) wrote :

Um, using sudo really isn't an option... Do you have the IRC trace for this??

Revision history for this message
Will Cooke (willcooke) wrote :

Emailed the IRC logs to you.

Revision history for this message
Launchpad Janitor (janitor) wrote :

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in gnome-software (Ubuntu Xenial):
status: New → Confirmed
Changed in gnome-software (Ubuntu):
status: New → Confirmed
Revision history for this message
Robert Ancell (robert-ancell) wrote :

Reason for breakage: snapd removed non-root support in:

commit 8f981ca652e9bffe587254c5c55177965eb3fcfd
Author: John R. Lenton <email address hidden>
Date: Wed Aug 3 21:35:23 2016 +0100

    daemon: stop using group membership as succedaneous of running things with sudo

This broke gnome-software, which is running as non-root...

The long term solution is to create a new D-Bus service that allows non-root users to get a Macaroon from snapd and uses Polkit to authorize. This is being added to snapd-glib.

As a short term solution, we really need to revert this change in Xenial...

Changed in gnome-software (Ubuntu Yakkety):
status: Confirmed → Triaged
Changed in gnome-software (Ubuntu Xenial):
status: Confirmed → Triaged
Changed in snapd (Ubuntu Xenial):
status: New → Triaged
Changed in snapd (Ubuntu Yakkety):
status: New → Triaged
Changed in snapd (Ubuntu Xenial):
importance: Undecided → High
Changed in snapd (Ubuntu Yakkety):
importance: Undecided → High
Revision history for this message
Robert Ancell (robert-ancell) wrote :

Main inclusion request for snapd-glib in bug 1620159.

Revision history for this message
Michal Predotka (mpredotka) wrote :

Today I was trying to install a snap package for the very first time. The app was 'Krita' ('krita' in the Ubuntu Store). I was surprised I have to log in to UbuntuOne account to install the app and later disappointed it is actually not possible. I was about to file a bug but I spotted this one :)

Revision history for this message
Robert Ancell (robert-ancell) wrote :

This is currently blocked on a security review for snapd-glib.

description: updated
no longer affects: snapd (Ubuntu)
no longer affects: snapd (Ubuntu Xenial)
no longer affects: snapd (Ubuntu Yakkety)
Changed in gnome-software (Ubuntu Yakkety):
status: Triaged → In Progress
importance: High → Critical
Changed in gnome-software (Ubuntu Xenial):
importance: High → Critical
Revision history for this message
Julia Palandri (julia-palandri) wrote :

Thanks for the update, Robert

description: updated
Revision history for this message
Jan Johansson (insomniacno1) wrote :

Yesterday I tried to install VLC non-free from Gnome Software and were asked to login to Ubuntu One, which do not work as it keeps saying Password or email is wrong. Obviously neither email or password are worng when I'm able to write here, after signed in through Ubuntu One in web browser - People above agree that this is a bug.

But wouldn't it be an idea to actually inform people of this through computer magazines or sites like https://sites.google.com/site/easylinuxtipsproject/ were people go for help setting up Ubuntu after install - so that they don't have to waste time running around on the net trying to figure out why this happens - since developers here have known about this since August 25.

It wouldn't take you more than a few minutes posting: "There is a bug in the Gnome Software, which disables the login to Ubuntu One - we are working on a solution. Please be patient. We will come out with and update very soon!"

This kind of thing annoys me, it were one of the reasons I switched to linux from Win7 after MS came out with their Win10 and tried to force people to update - I have used and supported/build/repaired computers for over 25 years. I never liked windows, but had to use it because of customers.

I just came from Ubuntu forums, where people are asking this question, but nobody here thinks its a good idea to answer them!

https://ubuntuforums.org/showthread.php?t=2335497

An update there on the progress of a solution would be an idea!

JBJ

Revision history for this message
Diego Germán Gonzalez (diegogermangonzalez) wrote : Re: [Bug 1616943] Re: Can't auth against U1 in g-s

     install from the terminal
     sudo snap install vlc
     Update
     sudo snap refresh vlc
     remove
     sudo snap remove vlc

El 11/10/16 a las 08:35, Jan Johansson escribió:
> Yesterday I tried to install VLC non-free from Gnome Software and were
> asked to login to Ubuntu One, which do not work as it keeps saying
> Password or email is wrong. Obviously neither email or password are
> worng when I'm able to write here, after signed in through Ubuntu One in
> web browser - People above agree that this is a bug.
>
> But wouldn't it be an idea to actually inform people of this through
> computer magazines or sites like
> https://sites.google.com/site/easylinuxtipsproject/ were people go for
> help setting up Ubuntu after install - so that they don't have to waste
> time running around on the net trying to figure out why this happens -
> since developers here have known about this since August 25.
>
> It wouldn't take you more than a few minutes posting: "There is a bug in
> the Gnome Software, which disables the login to Ubuntu One - we are
> working on a solution. Please be patient. We will come out with and
> update very soon!"
>
> This kind of thing annoys me, it were one of the reasons I switched to
> linux from Win7 after MS came out with their Win10 and tried to force
> people to update - I have used and supported/build/repaired computers
> for over 25 years. I never liked windows, but had to use it because of
> customers.
>
> I just came from Ubuntu forums, where people are asking this question,
> but nobody here thinks its a good idea to answer them!
>
> https://ubuntuforums.org/showthread.php?t=2335497
>
> An update there on the progress of a solution would be an idea!
>
> JBJ
>

Revision history for this message
Michal Predotka (mpredotka) wrote :

Maybe it would be a good idea to not show up snaps in the g-s until this bug is fixed.

Revision history for this message
Miguel (mlcasellas) wrote :

I have the same problem on Xubuntu 16.04 installing krita 3.0.1.1. Finally I installed correctly from terminal, but the issue exists in the Software Center.

Revision history for this message
Martin Pitt (pitti) wrote : Please test proposed package

Hello Will, or anyone else affected,

Accepted gnome-software into yakkety-proposed. The package will build now and be available at https://launchpad.net/ubuntu/+source/gnome-software/3.20.1+git20161013.0.d77d6cf-0ubuntu1 in a few hours, and then in the -proposed repository.

Please help us by testing this new package. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Your feedback will aid us getting this update out to other Ubuntu users.

If this package fixes the bug for you, please add a comment to this bug, mentioning the version of the package you tested, and change the tag from verification-needed to verification-done. If it does not fix the bug for you, please add a comment stating that, and change the tag to verification-failed. In either case, details of your testing will help us make a better decision.

Further information regarding the verification process can be found at https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in advance!

Changed in gnome-software (Ubuntu Yakkety):
status: In Progress → Fix Committed
tags: added: verification-needed
Revision history for this message
Adam Conrad (adconrad) wrote :

Hello Will, or anyone else affected,

Accepted gnome-software into yakkety-proposed. The package will build now and be available at https://launchpad.net/ubuntu/+source/gnome-software/3.20.1+git20161013.0.d77d6cf-0ubuntu2 in a few hours, and then in the -proposed repository.

Please help us by testing this new package. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Your feedback will aid us getting this update out to other Ubuntu users.

If this package fixes the bug for you, please add a comment to this bug, mentioning the version of the package you tested, and change the tag from verification-needed to verification-done. If it does not fix the bug for you, please add a comment stating that, and change the tag to verification-failed. In either case, details of your testing will help us make a better decision.

Further information regarding the verification process can be found at https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in advance!

Revision history for this message
Diego Germán Gonzalez (diegogermangonzalez) wrote :

Change the error message, now it says "An error occurred"

Revision history for this message
Michal Predotka (mpredotka) wrote :

Any way to test it on 16.04 LTS?

Revision history for this message
Diego Germán Gonzalez (diegogermangonzalez) wrote :
Revision history for this message
Diego Germán Gonzalez (diegogermangonzalez) wrote :

 gnome-software 3.20.1+git20161013.0.d77d6cf-0ubuntu2 Just change the error message, there is no difference between putting the correct or wrong password

Revision history for this message
Diego Germán Gonzalez (diegogermangonzalez) wrote :

Sorry, there would be easier to make snap have a proper graphical installer?
For years they lived together in Ubuntu an installer programs and Synaptic. And both did the same.

All the more reason to have two different installers for different package formats.

Revision history for this message
Abhishek Khandal (kabhishek) wrote :

Facing the same problem on a fresh 16.10 installation, experienced it first while trying to install VLC through software centre. Ubuntu SSO GUI didn't log me in, I tried a workaround using Terminal:

~$ sudo snap login <email>
[sudo] password for abhishek:
Password:
Login successful
abhishek@kabhishek:~/Documents$ sudo apt-get install vlc

Only the GUI SSO option doesn't authenticate.

Will Cooke (willcooke)
tags: added: verification-failed
removed: verification-needed
Revision history for this message
Diego Germán Gonzalez (diegogermangonzalez) wrote :

I do not know if it's the same problem, but this happens only in the version published to correct this bug

Revision history for this message
Robert Ancell (robert-ancell) wrote :

The verification failed because snapd-login-service was not installed - this will be fixed in snapd-glib 1.2-0ubuntu1.1

Revision history for this message
Jesús Morales (jesusmorales) wrote :

I couldn't log in but when I tried upvoting(is that what it is called?) a review the login prompt worked this time. How do I log out to try again and see if it is reproducible?

Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package gnome-software - 3.20.1+git20161013.0.d77d6cf-0ubuntu2

---------------
gnome-software (3.20.1+git20161013.0.d77d6cf-0ubuntu2) yakkety; urgency=medium

  * debian/control{,.in}: Build-Depend on libsnapd-glib-dev, to successfully
    build the Snap plugin.
  * debian/rules: Pass --enable-snap, so that configure bails out if the Snap
    plugin won't be built.

gnome-software (3.20.1+git20161013.0.d77d6cf-0ubuntu1) yakkety; urgency=medium

  * New upstream snapshot from the wip/ubuntu branch at
    git://git.gnome.org/gnome-software.
    - Use snapd-glib to perform snapd login. This fixes non-root access being
      removed in snapd. (LP: #1616943)

 -- Iain Lane <email address hidden> Thu, 13 Oct 2016 16:52:55 +0100

Changed in gnome-software (Ubuntu):
status: Fix Committed → Fix Released
Revision history for this message
Launchpad Janitor (janitor) wrote :

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in snapd-glib (Ubuntu):
status: New → Confirmed
Changed in snapd-glib (Ubuntu):
status: Confirmed → Fix Released
Changed in snapd-glib (Ubuntu):
importance: Undecided → Critical
no longer affects: gnome-software (Ubuntu Xenial)
Changed in gnome-software (Ubuntu Xenial):
status: New → Triaged
importance: Undecided → Critical
Changed in snapd-glib (Ubuntu Xenial):
status: New → Triaged
importance: Undecided → Critical
Changed in snapd-glib (Ubuntu):
assignee: nobody → Robert Ancell (robert-ancell)
Changed in gnome-software (Ubuntu Xenial):
assignee: nobody → Robert Ancell (robert-ancell)
Changed in snapd-glib (Ubuntu Xenial):
assignee: nobody → Robert Ancell (robert-ancell)
Revision history for this message
Martin Pitt (pitti) wrote :

snapd-glib accepted into xenial. Please upload the corresponding gnome-software SRU.

Changed in snapd-glib (Ubuntu Xenial):
status: Triaged → Fix Committed
Changed in gnome-software (Ubuntu Xenial):
status: Triaged → Fix Released
status: Fix Released → Fix Committed
Revision history for this message
Martin Pitt (pitti) wrote :

Hello Will, or anyone else affected,

Accepted gnome-software into xenial-proposed. The package will build now and be available at https://launchpad.net/ubuntu/+source/gnome-software/3.20.1+git20161013.0.d77d6cf-0ubuntu2~xenial1 in a few hours, and then in the -proposed repository.

Please help us by testing this new package. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation on how to enable and use -proposed.Your feedback will aid us getting this update out to other Ubuntu users.

If this package fixes the bug for you, please add a comment to this bug, mentioning the version of the package you tested, and change the tag from verification-needed to verification-done. If it does not fix the bug for you, please add a comment stating that, and change the tag to verification-failed. In either case, details of your testing will help us make a better decision.

Further information regarding the verification process can be found at https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in advance!

tags: removed: verification-failed
tags: added: verification-needed
Revision history for this message
Michal Predotka (mpredotka) wrote :

Just added proposed repository and refreshed packages. Unfortunately I don't see the update for gnome-software yet.

Revision history for this message
Michal Predotka (mpredotka) wrote :

I checked again today. There was an update for gnome-software. I updated via Synaptic to avoid updating other packages from the repository. I just checked "gnome-software" to be updated. Synaptic also checked "gnome-software-common" and "ubuntu-software" to be updated. Apart from that Synaptic also checked "libsnapd-glib1" and "snapd-login-service" to be installed. So after updating and installing mentioned packages, I closed Synaptic and started g-s, I searched for "krita" (snap version showed up) and tried to install it but without luck (error about wrong password). I restarted my computer and tried again installing Krita. This time it went fine. After I entered my launchpad email and password, I was asked to enter my computer password. After that I clicked "continue" and Krita was installed.

tags: added: verification-done
removed: verification-needed
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package gnome-software - 3.20.1+git20161013.0.d77d6cf-0ubuntu2

---------------
gnome-software (3.20.1+git20161013.0.d77d6cf-0ubuntu2) yakkety; urgency=medium

  * debian/control{,.in}: Build-Depend on libsnapd-glib-dev, to successfully
    build the Snap plugin.
  * debian/rules: Pass --enable-snap, so that configure bails out if the Snap
    plugin won't be built.

gnome-software (3.20.1+git20161013.0.d77d6cf-0ubuntu1) yakkety; urgency=medium

  * New upstream snapshot from the wip/ubuntu branch at
    git://git.gnome.org/gnome-software.
    - Use snapd-glib to perform snapd login. This fixes non-root access being
      removed in snapd. (LP: #1616943)

 -- Iain Lane <email address hidden> Thu, 13 Oct 2016 16:52:55 +0100

Changed in gnome-software (Ubuntu Yakkety):
status: Fix Committed → Fix Released
Revision history for this message
Brian Murray (brian-murray) wrote : Update Released

The verification of the Stable Release Update for gnome-software has completed successfully and the package has now been released to -updates. Subsequently, the Ubuntu Stable Release Updates Team is being unsubscribed and will not receive messages about this bug report. In the event that you encounter a regression using the package from -updates please report a new bug using ubuntu-bug and tag the bug report regression-update so we can easily find any regressions.

Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package snapd-glib - 1.2-0ubuntu1.1~xenial

---------------
snapd-glib (1.2-0ubuntu1.1~xenial) xenial; urgency=medium

  * Backport to xenial (LP: #1616943)

 -- Robert Ancell <email address hidden> Wed, 16 Nov 2016 14:58:58 +1300

Changed in snapd-glib (Ubuntu Xenial):
status: Fix Committed → Fix Released
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package gnome-software - 3.20.1+git20161013.0.d77d6cf-0ubuntu2~xenial1

---------------
gnome-software (3.20.1+git20161013.0.d77d6cf-0ubuntu2~xenial1) xenial; urgency=medium

  * New upstream snapshot from the wip/ubuntu branch at
    git://git.gnome.org/gnome-software.
    - Use snapd-glib to perform snapd login. This fixes non-root access being
      removed in snapd. (LP: #1616943)
    - Show screenshots for snaps (requires snapd 2.15.2) (LP: #1603610)
    - Set snap summary from snapd response (LP: #1629456)
    - Don't show terminal for graphical apps (LP: #1595023)
  * debian/control:
    - Build-depend on libsnapd-glib-dev
  * debian/rules:
    - Build with --enable-snap

 -- Robert Ancell <email address hidden> Wed, 23 Nov 2016 21:31:03 +1300

Changed in gnome-software (Ubuntu Xenial):
status: Fix Committed → Fix Released
Revision history for this message
sandor (sandoroncology) wrote :

no puedo instalar programas en ubuntu 16.10 porque me pide los datos de mi cuenta de ubuntu one y cuando le pongo mi direccion de correo y contrasenas dice que no es correcta

Changed in gnome-software (Ubuntu Yakkety):
assignee: Robert Ancell (robert-ancell) → nobody
Changed in gnome-software (Ubuntu):
assignee: Robert Ancell (robert-ancell) → nobody
Changed in gnome-software (Ubuntu):
assignee: nobody → Robert Ancell (robert-ancell)
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.