On Fri, 2026-10-02 at 07:11 +1000, Kel Modderman wrote: > Hi, > > Since 1.33.1-2, debian/lightdm.sysusers has: > > u! lightdm - "Light Display Manager" /var/lib/lightdm /bin/false > > With "u!", systemd-sysusers (systemd 262-1) locks the account. It sets > the expiry date to 1. On a new install /etc/shadow has: > > lightdm:!*:20727:::::1: > > # chage -l lightdm > Account expires : Jan 02, 1970 > > When the greeter starts, logind starts [email protected] for lightdm. The > PAM account check fails, so the unit fails: > > (systemd)[1093]: pam_unix(systemd-user:account): account lightdm has > expired (account expired) > (systemd)[1093]: [email protected]: Failed to set up PAM session: > Operation not permitted > systemd[1]: [email protected]: Failed with result 'exit-code'. > > The greeter still shows, but "systemctl is-system-running" reports > "degraded". > > Only new installs are affected. systemd-sysusers does not change an > account that already exists. > > Other display managers use plain "u" (sddm, gdm3, greetd, > plasma-login-manager). Plain "u" still sets an invalid password, so > nobody can log in with a password.
Hi Kel, thanks for the bug and the patch. I'm adding Luca to the recipients since he authored the patch, to check with him if it looks ok. Regards, -- Yves-Alexis
signature.asc
Description: This is a digitally signed message part
