Package: debian-edu-config
Version: 2.13.0
Severity: important
User: [email protected]
Usertags: debian-edu

Hi,

I'm installing the default server configuration. The user ('user1234', password
'secret_1234') does not get created in the installer. According to the Wiki
[1], this is a very important user. See the automated results in openQA [2].
The openQA setup uses ('testy', 'weakpassword')

Before the installer reboots, I've opened a shell to do some diagnostics.

`/usr/bin/user-setup-apply /target` is called to set up the users.

The root user was been created correctly.

In /target: there is no reference to the user in /target/etc/group,
/target/etc/passwd, /target/home.

I've enabled some debugging in user-setup-apply (set -x) to look that the
issue.

`db_get passwd/make_user` returns 'boolean false' instead of 'true', which is
suspect

I then forced some variables, to try to force the creation of the user:
```
db_set passwd/make-user 'true'
db_set passwd/username 'user1234'
db_set passwd/user-password 'secret_1234'
db_set passwd/user-password-again 'secret_1234'
db_set passwd/user-fullname 'Test user'
```

Side-note: the function 'is_system_user' really checks whether a non-system
user account exists (i.e. a UID in the range 1000-59999 in /target/etc/passwd)

After re-running `user-setup-apply /target`, the user is created without a
password and has a home directory. However upon the attempt to set the
password:
```
+ setpassword test1234 secret_1234 false
...
+ chroot /target chpasswd
chpasswd: (user test1234) pam_chauthok() failed, error:
Authentication token manipulation error
chpasswd: (line 1, user test1234) password not changed
```

`echo "root:newpwd" | chpasswd` works.

I looked a bit at the strace output, the first entry for /dev/log mentions
'pam_edu_nopw', whereas for test1234 it has 'chpasswd'.

With kind regards,
Roland Clobus

[1] https://wiki.debian.org/DebianEdu/Documentation/Trixie/Installation
[2] https://openqa.debian.net/tests/563978

Attachment: OpenPGP_signature.asc
Description: OpenPGP digital signature

Reply via email to