I had a look at the pam_krb5 source and it seems to generate standard prompt (like the ones we regression test for).
If you have this could you please attach /var/log/lightdm/lightdm.log and /var/log/lightdm/x-0-greeter.log after this occurs (it will show some information about what messages were sent between the daemon and the greeter). Also could someone give steps to set up the simplest Kereberos environment to reproduce this. Thanks. ** Changed in: lightdm (Ubuntu) Status: Confirmed => Incomplete -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to lightdm in Ubuntu. https://bugs.launchpad.net/bugs/972537 Title: lightdm doesn't allow expired passwords Status in “lightdm” package in Ubuntu: Incomplete Status in “lightdm” source package in Precise: Triaged Bug description: In Ubuntu 12.04, when logging in using the unity greeter in lightdm (1.1.9-0ubuntu1) with a user using Kerberos with an expired password, the login screen doesn't give the user the appropriate feedback to set their new password. The text console works correctly. The previous LTS used GDM, which behaved correctly. The normal prompting for this is: Username: cmo-test Password: **** Password expired. You must change it now. Enter new password: **** Enter it again: **** Instead, in lightdm, it is: Username: cmo-test Password: **** Enter it again: **** The "Password expired" message is never shown, and "Enter it again" is shown in the box instead of "Enter new password". If you use lighdm- gtk-greeter, you get the "password expired" message printed under the box, but still have the same prompting, never asking for the new password. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/lightdm/+bug/972537/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : desktop-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp