User account automatically locks repeatedly

Hello,

I am facing a strange issue that I’m not able to troubleshoot. Since the latest sudo update, my regular user account with sudoers permissions is getting locked repeatedly by some process. When this issue started happening I quickly created another admin account for myself from a root shell. That new account does not have this problem and I can unlock the main account using it. But I am not able to figure out which process is causing this and how to stop it from happening?

Here are some logs:

faillock --user aditya

aditya:
When                Type  Source                                           Valid
2021-01-30 07:31:10 TTY                                                        V
2021-01-30 07:31:38 TTY                                                        V
2021-01-30 07:31:40 TTY                                                        V

as soon as I reset the account, I see this in journalctl

journalctl -f -a -g pam

000 ses=3 subj==unconfined msg='op=PAM:authentication grantors=? acct="aditya" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=failed'
Jan 30 07:35:40 aditya-pc sudo[175052]: pam_unix(sudo:auth): conversation failed
Jan 30 07:35:40 aditya-pc sudo[175052]: pam_unix(sudo:auth): auth could not identify password for [aditya]
Jan 30 07:35:40 aditya-pc sudo[175052]: pam_systemd_home(sudo:auth): systemd-homed is not available: Unitdbus-org.freedesktop.home1.service not found.
Jan 30 07:35:40 aditya-pc audit[175052]: USER_AUTH pid=175052 uid=1000 auid=1000 ses=3 subj==unconfined msg='op=PAM:authentication grantors=? acct="aditya" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=failed'
Jan 30 07:35:40 aditya-pc kernel: audit: type=1100 audit(1612010140.527:3279): pid=175052 uid=1000 auid=1000 ses=3 subj==unconfined msg='op=PAM:authentication grantors=? acct="aditya" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=failed'
Jan 30 07:36:08 aditya-pc sudo[175219]: pam_unix(sudo:auth): conversation failed
Jan 30 07:36:08 aditya-pc sudo[175219]: pam_unix(sudo:auth): auth could not identify password for [aditya]
Jan 30 07:36:08 aditya-pc sudo[175219]: pam_systemd_home(sudo:auth): systemd-homed is not available: Unitdbus-org.freedesktop.home1.service not found.
Jan 30 07:36:08 aditya-pc audit[175219]: USER_AUTH pid=175219 uid=1000 auid=1000 ses=3 subj==unconfined msg='op=PAM:authentication grantors=? acct="aditya" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=failed'
Jan 30 07:36:08 aditya-pc kernel: audit: type=1100 audit(1612010168.687:3280): pid=175219 uid=1000 auid=1000 ses=3 subj==unconfined msg='op=PAM:authentication grantors=? acct="aditya" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=failed'
Jan 30 07:36:10 aditya-pc sudo[175228]: pam_unix(sudo:auth): conversation failed
Jan 30 07:36:10 aditya-pc sudo[175228]: pam_unix(sudo:auth): auth could not identify password for [aditya]
Jan 30 07:36:10 aditya-pc audit[175228]: USER_AUTH pid=175228 uid=1000 auid=1000 ses=3 subj==unconfined msg='op=PAM:authentication grantors=? acct="aditya" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=failed'
Jan 30 07:36:10 aditya-pc sudo[175228]: pam_systemd_home(sudo:auth): systemd-homed is not available: Unitdbus-org.freedesktop.home1.service not found.
Jan 30 07:36:10 aditya-pc kernel: audit: type=1100 audit(1612010170.634:3281): pid=175228 uid=1000 auid=1000 ses=3 subj==unconfined msg='op=PAM:authentication grantors=? acct="aditya" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=failed'
^C

I have tried searching for problems related to “pam_unix(sudo:auth): conversation failed” error but those didn’t apply

Please help!

  1. Do you log on using the “Main” admin account?
  2. Do you have any scripts running under that account?
  • If yes: which and what are their content?
  • If no: just tell us…

:+1: