User without password can't change password

[Cyborgscode]

Distribution

Fedora 42

Package version

6.4.9

Graphics hardware in use

Nvidia ( does not matter)

Frequency

Always

Bug description

App: /usr/bin/cinnamon-settings-users
Version: 6.4.9

A user added via settings, which does not get a explicit password,
can't change this password via settings after login.

Because: the process requires the old password, but that is empty and the ui mask does not accept an old empty password :D

of course, a passwd in a terminal can solve this, but which new Linux user would know this? It should work via settings UI, by checking if the passwd entry is empty and accept the new password without the old one.

Note:

With gnome there is the option to set a password request on first login, sounds like a reasonable option to add to the admin ui.

Steps to reproduce

Reproducible: Always

Steps to Reproduce:

1. login as admin
2. add user (UI does not offer a password entry)
3. overlook the "no password" hint in the UI display for the newly added user
4. login in as new user
5. try to change password.

Expected behavior

check for empty user password and do not require it, if empty.

Additional information

bugzilla.redhat.com/show_bug.cgi?id=2379884

[Cyborgscode]

left: the ui from cora user
right: the ui how cora got added (different session)

[prairienerd-18]

A solution would be to allow the admin to set a flag so cinnamon would ask for a password when the user logs in for the first time. Would also need to fix the issue of Account Details requiring current password when there is none. ( On second thought, this should be the priority.) Not sure what all that would take, but I'm gonna look into it.

[cplittlfield]

An alternative approach would be to require a password when creating a new user.

[prairienerd-18]

That's true, and would probably require less work. I feel that in the log run, cinnamon would benefit from the feature of being able to ask the user to set a password on the first login, and maybe at some point admins being able to force password changes. (Although that would not likely target most of the Mint user base.)

[prairienerd-18]

I've fixed the issue of not being able to change the password in the ui when none is set. #13027 This allows the user to set a password, but the admin must still remove the user from the nopasswdlogin group before the user is required to use the password to login. I'm open for suggestions on the best way to handle this.

[Cyborgscode]

thx