Hi Roland, On Mo 07 Sep 2026 10:30:03 CEST, Roland Clobus wrote:
Control: retitle -1 debian-edu-config: 13.6.0: user not created On 26/08/2026 17:56, Mike Gabriel wrote:The initial user is created only for TJENER, but not in /etc/passwd & friends but in LDAP.So, if you run getent passwd on a rebootet main server, you should find that initial user.Please see https://salsa.debian.org/debian-edu/debian-edu-config/-/blob/master/ldap-tools/ldap-debian-edu-install?ref_type=heads to read the full post-package-install story happening at the end of a Debian Edu mainserver D-I installation run.I guess, this bug can be closed then? (If so, please do. Otherwise, provide more feedback / thoughts).Let's leave this bug open until 13.7.0 has been released (planned for 2026-09-12). I've retitled this bug report to refer to the trixie 13.6.0 installer.
Ok. I agree.
I've run the scenario on openQA using the published edu netinst images, so the installer log files are publicly available for review.I ran the the installer on several edu netinst images: * the 12.15.0 bookworm edu netinst: the login works fine [1]
Good. Also works in real life.
* the 13.6.0 trixie edu netinst: the user cannot log in [2] (note that the icinga installation will be skipped [3])
Known issue, addressed by two changes: https://salsa.debian.org/debian-edu/debian-edu-config/-/commit/858a968950f78435101f478e736f6db9ec04ed46 https://salsa.debian.org/debian-edu/debian-edu/-/commit/d5c688a71ca771232542869e40eb3c6024df3d6f (only in unstable for now, trixie-pu uploads are coming today).
* the daily image from 2026-08-031 (forky) (because after that, #1146491 and kernel updates happened): the login works fine [4] (the icinga issue is no longer present in forky)
Great! I wasn't aware of those tests (because we currently have various missing packages in forky's Debian Edu due to some RC bugs in e.g. sssd (affected: autofs)).
Could it be that the LDAP configuration is partly done by the icinga module and some of it is an implicit requirement for the ldap-debian-edu-install script?
In Debian Edu 13.6, the icinga2-ido-mysql installation is done via cfengine3 and since trixie, cfengine3 does not have a working APT configuration anymore (or no network / no DNS in the /target chroot, can't remember). The solution was to get all packages installed via D-I package installation directly instead of post-install runs of APT.
With kind regards, Roland
Mike -- mike gabriel aka sunweaver (Debian Developer) mobile: +49 (1520) 1976 148 landline: +49 (4351) 486 14 27 GnuPG Fingerprint: 9BFB AEE8 6C0A A5FF BF22 0782 9AF4 6B30 2577 1B31 mail: [email protected], http://sunweavers.net
pgpoA9_vjWJEr.pgp
Description: Digitale PGP-Signatur
