Package: lightdm Version: 1.33.1-3 Severity: normal Tags: patch Hi,
Since 1.33.1-2, debian/lightdm.sysusers has: u! lightdm - "Light Display Manager" /var/lib/lightdm /bin/false With "u!", systemd-sysusers (systemd 262-1) locks the account. It sets the expiry date to 1. On a new install /etc/shadow has: lightdm:!*:20727:::::1: # chage -l lightdm Account expires : Jan 02, 1970 When the greeter starts, logind starts [email protected] for lightdm. The PAM account check fails, so the unit fails: (systemd)[1093]: pam_unix(systemd-user:account): account lightdm has expired (account expired) (systemd)[1093]: [email protected]: Failed to set up PAM session: Operation not permitted systemd[1]: [email protected]: Failed with result 'exit-code'. The greeter still shows, but "systemctl is-system-running" reports "degraded". Only new installs are affected. systemd-sysusers does not change an account that already exists. Other display managers use plain "u" (sddm, gdm3, greetd, plasma-login-manager). Plain "u" still sets an invalid password, so nobody can log in with a password. Fix: --- a/debian/lightdm.sysusers +++ b/debian/lightdm.sysusers @@ -1 +1 @@ -u! lightdm - "Light Display Manager" /var/lib/lightdm /bin/false +u lightdm - "Light Display Manager" /var/lib/lightdm /bin/false Workaround: chage -E -1 lightdm I tested the workaround: after it, [email protected] is active and the system state is "running". Thanks, Kel
