Control: retitle -1 debian-edu-config: 13.6.0: user not created
On 26/08/2026 17:56, Mike Gabriel wrote:
The initial user is created only for TJENER, but not in /etc/passwd & friends but in LDAP. So, if you run getent passwd on a rebootet main server, you should find that initial user. Please see https://salsa.debian.org/debian-edu/debian-edu-config/-/blob/master/ldap-tools/ldap-debian-edu-install?ref_type=heads to read the full post-package-install story happening at the end of a Debian Edu mainserver D-I installation run. I guess, this bug can be closed then? (If so, please do. Otherwise, provide more feedback / thoughts).
Let's leave this bug open until 13.7.0 has been released (planned for 2026-09-12). I've retitled this bug report to refer to the trixie 13.6.0 installer. I've run the scenario on openQA using the published edu netinst images, so the installer log files are publicly available for review. I ran the the installer on several edu netinst images: * the 12.15.0 bookworm edu netinst: the login works fine [1] * the 13.6.0 trixie edu netinst: the user cannot log in [2] (note that the icinga installation will be skipped [3]) * the daily image from 2026-08-031 (forky) (because after that, #1146491 and kernel updates happened): the login works fine [4] (the icinga issue is no longer present in forky) Could it be that the LDAP configuration is partly done by the icinga module and some of it is an implicit requirement for the ldap-debian-edu-install script? With kind regards, Roland [1] https://openqa.debian.net/tests/566651#step/_graphical_wait_login/14 [2] https://openqa.debian.net/tests/566649#step/_graphical_wait_login/23 [3] https://openqa.debian.net/tests/566649#step/grub/91 [4] https://openqa.debian.net/tests/571206 --- From the 12.15.0 installation log Aug 27 19:13:04 cf-agent[2977]: CFEngine(agent) Executing 'no timeout' ... '/usr/bin/ldap-debian-edu-install' Aug 27 19:13:07 slapd[6717]: @(#) $OpenLDAP: slapd 2.5.13+dfsg-5 (Feb 8 2023 01:56:12) $ Debian OpenLDAP Maintainers <[email protected]> Aug 27 19:13:07 slapd[6718]: slapd starting Aug 27 19:13:08 kadmin.local[6746]: No dictionary file specified, continuing without one. Aug 27 19:13:08 kadmin.local[6747]: No dictionary file specified, continuing without one. Aug 27 19:13:08 kadmin.local[6749]: No dictionary file specified, continuing without one. Aug 27 19:13:08 kadmin.local[6750]: No dictionary file specified, continuing without one. Aug 27 19:13:08 slapd[6718]: connection_read(19): no connection! Aug 27 19:13:08 kadmin.local[6751]: No dictionary file specified, continuing without one. Aug 27 19:13:08 kadmin.local[6752]: No dictionary file specified, continuing without one. Aug 27 19:13:08 kadmin.local[6753]: No dictionary file specified, continuing without one. Aug 27 19:13:08 kadmin.local[6754]: No dictionary file specified, continuing without one. Aug 27 19:13:08 cf-agent[2977]: CFEngine(agent) Q: "...du-install": info: Creating first user <testy> 'Testy McTestface'. Q: "...du-install": To initialize a brand new LDAP+KDC: Q: "...du-install": rm /var/lib/ldap/__db* /var/lib/ldap/*.bdb Q: "...du-install": rm /etc/krb5kdc/stash /etc/krb5.keytab* Q: "...du-install": LDAP passwords cleared from debconf database. Q: "...du-install": The provided LDAP password is valid. Q: "...du-install": info: added '/etc/ldap/root.ldif' to ldap database. Q: "...du-install": info: added '/etc/ldap/ipnetworks.ldif' to ldap database. Q: "...du-install": info: added '/etc/ldap/netgroup.ldif' to ldap database. Q: "...du-install": info: added '/etc/ldap/autofs.ldif' to ldap database. Q: "...du-install": info: added '/etc/ldap/sudo.ldif' to ldap database. Q: "...du-install": info: added '/etc/ldap/gosa.ldif' to ldap database. Q: "...du-install": info: added '/etc/ldap/gosa-server.ldif' to ldap database. Q: "...du-install": info: added '/etc/ldap/ltsp.ldif' to ldap database Aug 27 19:13:08 kadmin.local[6755]: No dictionary file specified, continuing without one. Aug 27 19:13:08 kadmin.local[6756]: No dictionary file specified, continuing without one. Aug 27 19:13:08 kadmin.local[6758]: No dictionary file specified, continuing without one. Aug 27 19:13:08 kadmin.local[6759]: No dictionary file specified, continuing without one. Aug 27 19:13:08 kadmin.local[6761]: No dictionary file specified, continuing without one. Aug 27 19:13:08 kadmin.local[6762]: No dictionary file specified, continuing without one. Aug 27 19:13:08 kadmin.local[6764]: No dictionary file specified, continuing without one. Aug 27 19:13:08 kadmin.local[6765]: No dictionary file specified, continuing without one. Aug 27 19:13:08 kadmin.local[6774]: No dictionary file specified, continuing without one. Aug 27 19:13:09 cf-agent[2977]: CFEngine(agent) Q: "...du-install": Entry for principal cifs/tjener.intern with kvno 2, encryption type aes128-cts-hmac-sha1-96 added to keytab FILE:/etc/krb5.keytab. Q: "...du-install": No policy specified for ldap/tjener.intern@INTERN; defaulting to no policy Q: "...du-install": Authenticating as principal root/admin@INTERN with password. Q: "...du-install": Principal "ldap/tjener.intern@INTERN" created. Q: "...du-install": Authenticating as principal root/admin@INTERN with password. Q: "...du-install": Entry for principal ldap/tjener.intern with kvno 2, encryption type aes256-cts-hmac-sha1-96 added to keytab WRFILE:/etc/krb5.keytab.ldap. Q: "...du-install": Entry for principal ldap/tjener.intern with kvno 2, encryption type aes128-cts-hmac-sha1-96 added to keytab WRFILE:/etc/krb5.keytab.ldap. Q: "...du-install": No policy specified for imap/tjener.intern@INTERN; defaulting to no policy Q: "...du-install": Authenticating as principal root/admin@INTERN with password. Q: Aug 27 19:13:09 cf-agent[2977]: CFEngine(agent) Last 76 quoted lines were generated by promiser '/usr/bin/ldap-debian-edu-install' Aug 27 19:13:09 cf-agent[2977]: CFEngine(agent) Completed execution of '/usr/bin/ldap-debian-edu-install' --- --- From the 13.6.0 installation log Aug 27 18:58:19 cf-agent[15511]: CFEngine(agent) Executing 'no timeout' ... '/usr/bin/ldap-debian-edu-install' Aug 27 18:58:22 slapd[17927]: @(#) $OpenLDAP: slapd 2.6.10+dfsg-1 (May 29 2025 23:41:48) $ Debian OpenLDAP Maintainers <[email protected]> Aug 27 18:58:22 slapd[17928]: slapd starting Aug 27 18:58:23 kadmin.local[17955]: No dictionary file specified, continuing without one. Aug 27 18:58:23 kadmin.local[17956]: No dictionary file specified, continuing without one. Aug 27 18:58:23 kadmin.local[17957]: No dictionary file specified, continuing without one. Aug 27 18:58:23 kadmin.local[17958]: No dictionary file specified, continuing without one. Aug 27 18:58:23 kadmin.local[17959]: No dictionary file specified, continuing without one. Aug 27 18:58:23 kadmin.local[17960]: No dictionary file specified, continuing without one. Aug 27 18:58:23 kadmin.local[17961]: No dictionary file specified, continuing without one. Aug 27 18:58:23 kadmin.local[17962]: No dictionary file specified, continuing without one. Aug 27 18:58:23 cf-agent[15511]: CFEngine(agent) Q: "...du-install": info: Creating first user <testy> 'Testy McTestface'. Q: "...du-install": To initialize a brand new LDAP+KDC: Q: "...du-install": rm /var/lib/ldap/__db* /var/lib/ldap/*.bdb Q: "...du-install": rm /etc/krb5kdc/stash /etc/krb5.keytab* Q: "...du-install": LDAP passwords cleared from debconf database. Q: "...du-install": The provided LDAP password is valid. Q: "...du-install": info: added '/etc/ldap/root.ldif' to ldap database. Q: "...du-install": info: added '/etc/ldap/ipnetworks.ldif' to ldap database. Q: "...du-install": info: added '/etc/ldap/netgroup.ldif' to ldap database. Q: "...du-install": info: added '/etc/ldap/autofs.ldif' to ldap database. Q: "...du-install": info: added '/etc/ldap/sudo.ldif' to ldap database. Q: "...du-install": info: added '/etc/ldap/gosa.ldif' to ldap database. Q: "...du-install": info: added '/etc/ldap/gosa-server.ldif' to ldap database. Q: "...du-install": info: added '/etc/ldap/ltsp.ldif' to ldap databas Aug 27 18:58:23 kadmin.local[17963]: No dictionary file specified, continuing without one. Aug 27 18:58:23 kadmin.local[17964]: No dictionary file specified, continuing without one. Aug 27 18:58:23 kadmin.local[17966]: No dictionary file specified, continuing without one. Aug 27 18:58:23 kadmin.local[17967]: No dictionary file specified, continuing without one. Aug 27 18:58:23 kadmin.local[17969]: No dictionary file specified, continuing without one. Aug 27 18:58:23 kadmin.local[17970]: No dictionary file specified, continuing without one. Aug 27 18:58:23 slapd[17928]: connection_read(17): no connection! Aug 27 18:58:23 kadmin.local[17972]: No dictionary file specified, continuing without one. Aug 27 18:58:23 kadmin.local[17973]: No dictionary file specified, continuing without one. Aug 27 18:58:23 kadmin.local[17982]: No dictionary file specified, continuing without one. Aug 27 18:58:27 cf-agent[15511]: CFEngine(agent) Q: "...du-install": Entry for principal cifs/tjener.intern with kvno 2, encryption type aes128-cts-hmac-sha1-96 added to keytab FILE:/etc/krb5.keytab. Q: "...du-install": No policy specified for ldap/tjener.intern@INTERN; defaulting to no policy Q: "...du-install": Authenticating as principal root/admin@INTERN with password. Q: "...du-install": Principal "ldap/tjener.intern@INTERN" created. Q: "...du-install": Authenticating as principal root/admin@INTERN with password. Q: "...du-install": Entry for principal ldap/tjener.intern with kvno 2, encryption type aes256-cts-hmac-sha1-96 added to keytab WRFILE:/etc/krb5.keytab.ldap. Q: "...du-install": Entry for principal ldap/tjener.intern with kvno 2, encryption type aes128-cts-hmac-sha1-96 added to keytab WRFILE:/etc/krb5.keytab.ldap. Q: "...du-install": No policy specified for imap/tjener.intern@INTERN; defaulting to no policy Q: "...du-install": Authenticating as principal root/admin@INTERN with password. Q: Aug 27 18:58:27 cf-agent[15511]: CFEngine(agent) Last 76 quoted lines were generated by promiser '/usr/bin/ldap-debian-edu-install' Aug 27 18:58:27 cf-agent[15511]: CFEngine(agent) Completed execution of '/usr/bin/ldap-debian-edu-install' ---
OpenPGP_signature.asc
Description: OpenPGP digital signature
