https://bugzilla.redhat.com/show_bug.cgi?id=2343766

Bug ID: 2343766 Summary: stdin cannot be used to supply Fedora password anymore Product: Fedora Version: 41 OS: Linux Status: NEW Component: fedora-packager Keywords: Regression Severity: medium Assignee: mboddu@bhujji.com Reporter: pemensik@redhat.com QA Contact: extras-qa@fedoraproject.org CC: davide@cavalca.name, epel-packagers-sig@lists.fedoraproject.org, infra-sig@lists.fedoraproject.org, mboddu@bhujji.com, rhbugs@n-dimensional.de Target Milestone: --- Classification: Fedora

I have been using alias to autologin into fedora kerberos, using secret tool to provide a password.

alias fkinitp='secret-tool lookup application shell id fedoraproject.org | fkinit' This has worked on f40, but does not work anymore. Because

echo test | systemd-ask-password returns failure: Failed to query password: Permission denied

But when I run it on interactive console tty, it allows me to enter the password just fine. The error does not share why is it considered wrong or what exactly returned permission error.

Reproducible: Always

Steps to Reproduce: 1. echo test-pwd | fkinit Actual Results: Failed to query password: Permission denied

Expected Results: Kerberos initialized from stdin password or at least possible parameter to do that.

This worked me at least from f38, but is broken on f41.

It seems secret-tool is a kind of different approach to secure passwords. But at least it can access my gnome keyring decrypted on login, which does not save my password anywhere on disk plaintext, but does not force me to memorize my Fedora password.

I am Red Hat employee, I have already REDHAT.COM krb5 realm login and Fedora login does not have same importance to me. I do not want to memorize both passwords, so I trust my keyring to store Fedora password.

systemd-ask-password does not provide useful error message in this case. While systemd password prompt is nice looking, it should not create regressions. Not sure how to fix this issue, so no pull request (yet).