Re: Password problem confirmed as repeatable - was [Re: Newbie password problem(s)]

2012-11-18 Thread Richard Owlett

Chris Bannister wrote:

On Sun, Nov 18, 2012 at 12:46:38AM +0900, Osamu Aoki wrote:

Hi,

On Sat, Nov 17, 2012 at 06:31:50AM -0600, Richard Owlett wrote:
...

I've been a "computer user" since before Mr. Torvalds was born. I
just never had reason to have contact with *nix. Even when working
for DEC I was much more into analog than digital.


I see.  I guess you were a VMS or some mainframe user...

As for apt-zip:
  http://alioth.debian.org/projects/apt-zip
  http://packages.qa.debian.org/a/apt-zip.html
  http://bugs.debian.org/cgi-bin/pkgreport.cgi?src=apt-zip

It seems somewhat stalled.  You may wish to takeover project to update
it to be compatible with current apt repository.  The last update was
2008.


There is also apt-offline, which I think is still being maintained.
http://apt-offline.alioth.debian.org/

I have used it successfully in the past.



Version 1.2 was announced on this list back in April.
As to DEC, we had a PDP-11  running either RT-11 or RSX-11M 
- forget which - doing data collection.
As to the reference in the last couple of posts, I've seen 
many but not all. My initial approach to Linux was

"Read much, download little" ;)



--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Archive: http://lists.debian.org/50a8d344.1000...@cloud85.net



Re: Password problem confirmed as repeatable - was [Re: Newbie password problem(s)]

2012-11-18 Thread Chris Bannister
On Sun, Nov 18, 2012 at 12:46:38AM +0900, Osamu Aoki wrote:
> Hi,
> 
> On Sat, Nov 17, 2012 at 06:31:50AM -0600, Richard Owlett wrote:
> ...
> > I've been a "computer user" since before Mr. Torvalds was born. I
> > just never had reason to have contact with *nix. Even when working
> > for DEC I was much more into analog than digital.
> 
> I see.  I guess you were a VMS or some mainframe user...
> 
> As for apt-zip:
>  http://alioth.debian.org/projects/apt-zip
>  http://packages.qa.debian.org/a/apt-zip.html
>  http://bugs.debian.org/cgi-bin/pkgreport.cgi?src=apt-zip
> 
> It seems somewhat stalled.  You may wish to takeover project to update
> it to be compatible with current apt repository.  The last update was
> 2008.

There is also apt-offline, which I think is still being maintained.
http://apt-offline.alioth.debian.org/

I have used it successfully in the past.

-- 
"If you're not careful, the newspapers will have you hating the people
who are being oppressed, and loving the people who are doing the 
oppressing." --- Malcolm X


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/20121118104838.GB24408@tal



Re: Password problem confirmed as repeatable - was [Re: Newbie password problem(s)]

2012-11-17 Thread Osamu Aoki
Hi,I thought about different approach ...

Since 

On Sun, Nov 18, 2012 at 12:46:38AM +0900, Osamu Aoki wrote:
> Hi,
> 
> On Sat, Nov 17, 2012 at 06:31:50AM -0600, Richard Owlett wrote:
> ...
> > I've been a "computer user" since before Mr. Torvalds was born. I
> > just never had reason to have contact with *nix. Even when working
> > for DEC I was much more into analog than digital.
> 
> I see.  I guess you were a VMS or some mainframe user...
> 
> As for apt-zip:
>  http://alioth.debian.org/projects/apt-zip
>  http://packages.qa.debian.org/a/apt-zip.html
>  http://bugs.debian.org/cgi-bin/pkgreport.cgi?src=apt-zip
> 
> It seems somewhat stalled.  You may wish to takeover project to update
> it to be compatible with current apt repository.  The last update was
> 2008.

Usually, I recommend not to try to make full archive copy to reduce our
server load.  But if you are careful, this may be a simpler solution
than fixing apt-zip.  You may also avoid some parts of archive.  These
debian package maybe useful to be as efficient as possible to make
partial mirror.

 debmirror  http://packages.qa.debian.org/d/debmirror.html
   (This is made by debhelper developer and current)
 apt-mirror http://apt-mirror.sourceforge.net/
http://packages.qa.debian.org/a/apt-mirror.html
 apt-p2phttp://www.camrdale.org/apt-p2p/
http://packages.qa.debian.org/a/apt-mirror.html

Osamu



-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/20121117161801.GA19855@goofy.localdomain



Re: Password problem confirmed as repeatable - was [Re: Newbie password problem(s)]

2012-11-17 Thread Osamu Aoki
Hi,

On Sat, Nov 17, 2012 at 06:31:50AM -0600, Richard Owlett wrote:
...
> I've been a "computer user" since before Mr. Torvalds was born. I
> just never had reason to have contact with *nix. Even when working
> for DEC I was much more into analog than digital.

I see.  I guess you were a VMS or some mainframe user...

As for apt-zip:
 http://alioth.debian.org/projects/apt-zip
 http://packages.qa.debian.org/a/apt-zip.html
 http://bugs.debian.org/cgi-bin/pkgreport.cgi?src=apt-zip

It seems somewhat stalled.  You may wish to takeover project to update
it to be compatible with current apt repository.  The last update was
2008.

> >By the way, we have some basics for use as:
> >   http://www.debian.org/doc/manuals/debian-reference/
> 
> Thanks for reminding me. I haven't used it as, being on a dial-up
> connection, online manuals are inconvenient. Is it available as a
> PDF or as a single HTML file?

For installation, you should start with Install Manual:
  http://www.debian.org/releases/testing/installmanual
  http://www.debian.org/releases/stable/installmanual
  PDFs are available. 
  If you use 64bit PC, you want amd64 version.
  It is good idea to read this if you really wish to tweak.

It is available as Debian Package.
  http://packages.qa.debian.org/d/debian-reference.html
  apt-get install debian-reference-en
  This is more about Unix shell focused.
  Once you install it, you can see it via browser.

(I know I used to have PDF.  Building PDF for non-English via XML->XeTeX
is still not so easy.  That will be my next project.  Maybe I should
enable just for English and French first which I know is easy.)

Another good source is THE DEBIAN ADMINISTRATOR'S HANDBOOK
  http://packages.qa.debian.org/d/debian-handbook.html
  apt-get install debian-handbook
  General guide.

> Is there a similar volume of preseeding, especially for those of us
> who insist on installing without the availability of an internet
> connection.
> [I'm in rural SW MO on the end of a 56k dial-up connection ;]

I see.  You got no speed limit for automobile but speed limit for
Internet.  56k should be practically impossible for tracking 
testing without apt-zip.

If you have access to fast network somewhere, download DVD-1 at least.
That should give you decent system. (There are 2 more DVDs to be
complete.)
  http://www.debian.org/devel/debian-installer/
  http://www.debian.org/devel/debian-installer/errata

All you need is few file images.  You do not need network to install DVD
or CD.  (I checked how big archive is, it seems DLBL image is only
one... so guess)

If you do not install large desktop application and keep it just with
consoles, tracking testing may be possible with direct 56k connection.

Regards,

Osamu


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/20121117154638.GA18311@goofy.localdomain



Re: Password problem confirmed as repeatable - was [Re: Newbie password problem(s)]

2012-11-17 Thread Richard Owlett

Osamu Aoki wrote:

Hi,

On Fri, Nov 16, 2012 at 01:53:47PM -0600, Richard Owlett wrote:

Terho Uotila wrote:

Unless you want to try very minimal system you probably want shadow
passwords.


I do not understand.
Going by text displayed during the installation  I had the
impression that shadow passwords were for those overly paranoid
about supposed incremental security advantages. My machines will
effectively be the ultimate in single user systems. I will be the
only one with physical access. They will have only occasional
restricted access to the internet over a dial up connection. It is
very unlikely that there will ever be a LAN among my machines. I do
not see that Debian even claims that shadow passwords *could* be of
any benefit to me ;/


1. Use of shadow is almost standard these days.

2. If your are attacked while you are using user account to access
internet, the use of shadow password gives you one thin but extra
layer of protection to protect your root account after your user
account is hacked.

3. Disabling shadow does not give you much speed or space.  Configuring
system to odd configuration is usually not good idea since it is
tested less.


Chuckle.
One does not usually associated the word 
normal/standard/typical with me.

My whole goal is to do an install that I know is on the fringe.
That is why I bought a used laptop which will _*NOT*_ be 
connected to the internet for by experiments.






On Thu, 15 Nov 2012 11:04:21 -0600
Richard Owlett wrote:


2. Did not enable shadow passwords
(...)
3. Attempted "su", neither root nor user password accepted


You may have hit a bug.


Obviously there is a "bug".
The question is it me or Debian?


In this context, more likely Debian or its upstream.


I noticed a problem with disabling shadow
passwords some time back and I don't know if anyone has fixed it, as
(ahem) I haven't gotten around to reporting it yet...


For you I have such a deal.
I've submitted a bug [693...@bugs.debian.org] on which you may
comment.
This will be especially useful if the problem has been observed in
something later than version 6.0.5.



I recall (maybe wrongly) figuring out that when shadow passwords were
not enabled, installer still saved root password into shadow before
disabling it, or something on those lines.


I don't know. Though ~"3 score and 10", this is my first foray into
*nix.


Welcome and if you are newbie, stay within safe area :-)


That's no fun.


Do not try to do something complicated before getting system understood.


I'm what once was referred to as a kinesthetic learner. I 
learn by doing.
I've been a "computer user" since before Mr. Torvalds was 
born. I just never had reason to have contact with *nix. 
Even when working for DEC I was much more into analog than 
digital.





I could fix my installation at the time by going into single user mode
and changing root password, after which it worked correctly.


I don't understand that.


I did not know this but passwd package ships command called
shadowconfig.  Use "shadowconfig on".

See "man shadowconfig" and  /usr/share/doc/passwd/README.Debian for more.
(If you installed from CD, you may alternatively reinstall system ...)

By the way, we have some basics for use as:
   http://www.debian.org/doc/manuals/debian-reference/


Thanks for reminding me. I haven't used it as, being on a 
dial-up connection, online manuals are inconvenient. Is it 
available as a PDF or as a single HTML file?


Is there a similar volume of preseeding, especially for 
those of us who insist on installing without the 
availability of an internet connection.

[I'm in rural SW MO on the end of a 56k dial-up connection ;]



Good luck,

Osamu





--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Archive: http://lists.debian.org/50a783b6.30...@cloud85.net



Re: Password problem confirmed as repeatable - was [Re: Newbie password problem(s)]

2012-11-16 Thread Osamu Aoki
Hi,

On Fri, Nov 16, 2012 at 01:53:47PM -0600, Richard Owlett wrote:
> Terho Uotila wrote:
> >Unless you want to try very minimal system you probably want shadow
> >passwords.
> 
> I do not understand.
> Going by text displayed during the installation  I had the
> impression that shadow passwords were for those overly paranoid
> about supposed incremental security advantages. My machines will
> effectively be the ultimate in single user systems. I will be the
> only one with physical access. They will have only occasional
> restricted access to the internet over a dial up connection. It is
> very unlikely that there will ever be a LAN among my machines. I do
> not see that Debian even claims that shadow passwords *could* be of
> any benefit to me ;/

1. Use of shadow is almost standard these days.

2. If your are attacked while you are using user account to access
   internet, the use of shadow password gives you one thin but extra
   layer of protection to protect your root account after your user
   account is hacked.

3. Disabling shadow does not give you much speed or space.  Configuring
   system to odd configuration is usually not good idea since it is
   tested less.

> >On Thu, 15 Nov 2012 11:04:21 -0600
> >Richard Owlett wrote:
> >
> >>2. Did not enable shadow passwords
> >>(...)
> >>3. Attempted "su", neither root nor user password accepted
> >
> >You may have hit a bug.
> 
> Obviously there is a "bug".
> The question is it me or Debian?

In this context, more likely Debian or its upstream.
 
> >I noticed a problem with disabling shadow
> >passwords some time back and I don't know if anyone has fixed it, as
> >(ahem) I haven't gotten around to reporting it yet...
> 
> For you I have such a deal.
> I've submitted a bug [693...@bugs.debian.org] on which you may
> comment.
> This will be especially useful if the problem has been observed in
> something later than version 6.0.5.
> 
> >
> >I recall (maybe wrongly) figuring out that when shadow passwords were
> >not enabled, installer still saved root password into shadow before
> >disabling it, or something on those lines.
> 
> I don't know. Though ~"3 score and 10", this is my first foray into
> *nix.

Welcome and if you are newbie, stay within safe area :-)
Do not try to do something complicated before getting system understood.

> >I could fix my installation at the time by going into single user mode
> >and changing root password, after which it worked correctly.
> 
> I don't understand that.

I did not know this but passwd package ships command called
shadowconfig.  Use "shadowconfig on".  

See "man shadowconfig" and  /usr/share/doc/passwd/README.Debian for more.
(If you installed from CD, you may alternatively reinstall system ...)

By the way, we have some basics for use as:
  http://www.debian.org/doc/manuals/debian-reference/

Good luck,

Osamu 


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/20121117073208.GA25050@goofy.localdomain



Re: Password problem confirmed as repeatable - was [Re: Newbie password problem(s)]

2012-11-16 Thread Richard Owlett

Terho Uotila wrote:

Unless you want to try very minimal system you probably want shadow
passwords.


I do not understand.
Going by text displayed during the installation  I had the 
impression that shadow passwords were for those overly 
paranoid about supposed incremental security advantages. My 
machines will effectively be the ultimate in single user 
systems. I will be the only one with physical access. They 
will have only occasional restricted access to the internet 
over a dial up connection. It is very unlikely that there 
will ever be a LAN among my machines. I do not see that 
Debian even claims that shadow passwords *could* be of any 
benefit to me ;/




On Thu, 15 Nov 2012 11:04:21 -0600
Richard Owlett wrote:


2. Did not enable shadow passwords
(...)
3. Attempted "su", neither root nor user password accepted


You may have hit a bug.


Obviously there is a "bug".
The question is it me or Debian?


I noticed a problem with disabling shadow
passwords some time back and I don't know if anyone has fixed it, as
(ahem) I haven't gotten around to reporting it yet...


For you I have such a deal.
I've submitted a bug [693...@bugs.debian.org] on which you 
may comment.
This will be especially useful if the problem has been 
observed in something later than version 6.0.5.




I recall (maybe wrongly) figuring out that when shadow passwords were
not enabled, installer still saved root password into shadow before
disabling it, or something on those lines.


I don't know. Though ~"3 score and 10", this is my first 
foray into *nix.




I could fix my installation at the time by going into single user mode
and changing root password, after which it worked correctly.


I don't understand that.



--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Archive: http://lists.debian.org/50a699cb.4010...@cloud85.net



Re: Password problem confirmed as repeatable - was [Re: Newbie password problem(s)]

2012-11-16 Thread Terho Uotila
Unless you want to try very minimal system you probably want shadow
passwords.

On Thu, 15 Nov 2012 11:04:21 -0600
Richard Owlett wrote:

> 2. Did not enable shadow passwords
> (...)
> 3. Attempted "su", neither root nor user password accepted

You may have hit a bug. I noticed a problem with disabling shadow
passwords some time back and I don't know if anyone has fixed it, as
(ahem) I haven't gotten around to reporting it yet...

I recall (maybe wrongly) figuring out that when shadow passwords were
not enabled, installer still saved root password into shadow before
disabling it, or something on those lines.

I could fix my installation at the time by going into single user mode
and changing root password, after which it worked correctly.


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/20121116125705.6ede7...@deneb.local.net



Password problem confirmed as repeatable - was [Re: Newbie password problem(s)]

2012-11-15 Thread Richard Owlett

Richard Owlett wrote:

I've been doing a series of Debian installs over the last
several months.
YES. There are easier ways to do things. *BUT* my purpose is
_educational_ rather than "efficiency" ;)

I have a history of problems with the root password not
being recognized.

If the problem *DOES* occur on a  individual install
iteration , it *WILL* occur on *EVERY* cold boot and *EVERY*
time a root password is required.
If the problem *DOESN'T* occur on a  individual install
iteration , it *WILL NEVER* occur on *ANY* cold boot and
*ANY* time a root password is required.

Whether or not the problem appears is independent of:
install media - LiveCD or purchased 8 DVD set
   target machine - Lenovo ThinkPad or Lenovo desktop

On  reinstall the problem may or may not occur independent
of previous condition.

The current problem iteration:
A minimum CLI install on the desktop machine.
A successful boot which accepted my user name and password.
Attempted to use su command, would not accept either password.
Successful "apt-get install gdm3" using user password.
Reboot resulted in expected GUI.
Could not access either "Root Terminal" nor "Synaptic" from
menu - password not accepted.

When rebooting into "Rescue Mode", the last two lines
displayed are:
sulogin: root account is locked, starting shell
root@localhost:~#

At this point I'm allowed to do "apt-get install xyz" - no
password required.


Comments, questions, suggestions?






Notes on reinstall after having root password not recognized 
*AGAIN*


Power off the machine
Power up and chose DVD as boot device
With Debian 6.0.5 DVD 1 of 8 in drive, select "Graphical 
Expert Install"


from here on only entries when default entry NOT 
chosen


1. after network configuration failed due *NO* network existing
   chose "Do not configure network at this time"
2. Did not enable shadow passwords
3. Did not chose "set clock using NTP"
4. Set time zone to Central
5. Partitioning choices made
   Manual
   Delete *ALL* existing partitions
   Create a 20 GB primary partition at beginning of drive, 
format as Ext3,

  mount point /
   Create a 5 GB logical partition at end of drive for swap
6. Driver selection - Generic [I usually choose targeted]
7. Software selection - Chose ONLY "Standard system utilities"
8. Finish the installation - said clock not set to UTC


1st boot after install
1. User name and password accepted
2. Attempted "sudo apt-get install gdm3"
   Received error message "-bash: sudo: command not found"
3. Attempted "su", neither root nor user password accepted
4. Rebooted with CNTRL-ALT-DEL
5. Chose rescue mode
6. System appeared to start as expected

   The last three lines displayed on monitor are:

Setting up console font and keymap...done.
sulogin: root account is locked, starting shell
root@debian:~# [9.683173] IBM TrackPoint firmware: 0x0e, 
buttons: 3/3
[9.892571] input: TPPS/2 IBM TrackPoint as 
/devices/platform/i8042serio1/serio2/input/input10


I then hit  receiving a new prompt of "root@debian~#"

7. Entered "apt-get install gdm3", received a prompt of "Do 
you want to continue [Y/n]?" to which I responded with 


*NOTE BENE* NO PASSWORD(s) were requested or given after I 
started Rescue mode.


8. That process appeared to run to a normal finish.
9. Then entered "apt-get install gedit gparted" which also 
seemed to conclude normally.

10. Rebooted by typing "exit"
11. Received an apparently normal Gnome request for password 
which was accepted.
12. Attempted to run both "root terminal" and "gparted", 
neither would recognize the root password.



Re-did the above installation except chose "Install" when 
DVD booted.
Every thing was the same through Step 2 under "1st boot 
after install".


When entering "su" in step 3, the root password *WAS* accepted.
Doing "apt-get install gdm3" and "apt-get install gedit 
gparted" both proceeded to apparently normal finish. Typing 
"exit" returned me to the user prompt. I then rebooted using 
CNTRL-ALT-DEL.


Attempting to run Root Terminal proceeded normally thru 
prompting and apparently accepting the root password. The 
terminal did not appear - I've had that happen before, 
apparently although the icon for Root Terminal appears in 
the Applications sub-menu, the underlying program is not 
installed.


Gparted started without asking for a password while 
displaying the screen titled "Granted permissions without 
asking for password". Confirmed my suspicion by powering 
down and rebooting. This time I started Gparted first [it 
did ask for root password] and then attempting to star Root 
Terminal. I received the screen titled "Granted permissions 
without asking for password". The Root Terminal again DID 
NOT appear. Installing gnome-terminal with Synaptic caused 
Terminal to appear in Applications menu. Now both Root 
Terminal and Terminal are functional.




--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Con

Re: Newbie password problem(s)

2012-10-18 Thread Richard Owlett

Brian wrote in previous post:

The sudo package is installed and the user added to group sudo. If

>"apt-get install gdm3" installed gd3 this is either a misobservetion
>or the discovery of a massive security problem.


I'm beginning to suspect "massive security problem."
I'm going have to create and test a preseed file so someone 
else can duplicate what I'm doing.
I've been reading about preseeding but haven't actually done 
it yet.
I'm doing things that a likely very atypical, but I believe 
legal. I'm seeing other unexpected things.

Got only 3-4 hours sleep last night, I'll call it a day.


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Archive: http://lists.debian.org/508050ad.7050...@cloud85.net



Re: Newbie password problem(s)

2012-10-18 Thread Brian
On Thu 18 Oct 2012 at 11:32:49 -0500, Richard Owlett wrote:

> Brian wrote:
> >On Wed 17 Oct 2012 at 21:05:00 +0300, Andrei POPESCU wrote:
> >
> >>On Mi, 17 oct 12, 12:22:48, Richard Owlett wrote:
> >>>
> >>>When rebooting into "Rescue Mode", the last two lines displayed are:
> >>>sulogin: root account is locked, starting shell
> >>>root@localhost:~#
> >>>
> >>>At this point I'm allowed to do "apt-get install xyz" - no password
> >>>required.
> >>>
> >>>Comments, questions, suggestions?
> >>
> >>I don't know for sure (never used this option), but this sounds like you
> >>left the root password blank during install.
> >
> >Given the message from sulogin, this is highly likely. In fact, a
> >certainty. You are given a root shell so it is not surprising apt-get
> >works.
> >
> >>  In such cases the root
> >>account is locked and the user create during install is given sudo
> >>powers.
> >
> >The sudo package is installed and the user added to group sudo. If
> >"apt-get install gdm3" installed gd3 this is either a misobservetion
> >or the discovery of a massive security problem.
> >
> 
> If you are referring to what I reported about lines displayed when
> booting in rescue mode, they were copied accurately. As I had no
> means to cut-n-paste between my test machine and my e-mail machine I
> was copying it character by character in my one finger hunt-n-peck
> typing mode.

My final sentence refers to your writing 'Successful "apt-get install
gdm3" using user password.' which does not occur in your account of
booting in recovery mode. Without knowing what the command you used was
and what you meant by 'using user password' it is a little difficult to
know what is going on. All I can say is that the command 'apt-get
install gdm3', when given here from a non-root account, does not install
gdm3.


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/20121018172954.GB26295@desktop



Re: Newbie password problem(s)

2012-10-18 Thread Richard Owlett

Brian wrote:

On Wed 17 Oct 2012 at 21:05:00 +0300, Andrei POPESCU wrote:


On Mi, 17 oct 12, 12:22:48, Richard Owlett wrote:


When rebooting into "Rescue Mode", the last two lines displayed are:
sulogin: root account is locked, starting shell
root@localhost:~#

At this point I'm allowed to do "apt-get install xyz" - no password
required.

Comments, questions, suggestions?


I don't know for sure (never used this option), but this sounds like you
left the root password blank during install.


Given the message from sulogin, this is highly likely. In fact, a
certainty. You are given a root shell so it is not surprising apt-get
works.


  In such cases the root
account is locked and the user create during install is given sudo
powers.


The sudo package is installed and the user added to group sudo. If
"apt-get install gdm3" installed gd3 this is either a misobservetion
or the discovery of a massive security problem.



If you are referring to what I reported about lines 
displayed when booting in rescue mode, they were copied 
accurately. As I had no means to cut-n-paste between my test 
machine and my e-mail machine I was copying it character by 
character in my one finger hunt-n-peck typing mode.


Based on Andrei's comments , I did a clean install 
(including starting from power off condition). I apparently 
don't have password problems now. I've found another glitch 
which is apparently repeatable. I've a couple more test I 
want to run. I'll add one more variation to those an install 
intentionally omitting a root password.




--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Archive: http://lists.debian.org/50802f31.9080...@cloud85.net



Re: Newbie password problem(s)

2012-10-18 Thread Brian
On Wed 17 Oct 2012 at 21:05:00 +0300, Andrei POPESCU wrote:

> On Mi, 17 oct 12, 12:22:48, Richard Owlett wrote:
> > 
> > When rebooting into "Rescue Mode", the last two lines displayed are:
> > sulogin: root account is locked, starting shell
> > root@localhost:~#
> > 
> > At this point I'm allowed to do "apt-get install xyz" - no password
> > required.
> > 
> > Comments, questions, suggestions?
> 
> I don't know for sure (never used this option), but this sounds like you 
> left the root password blank during install.

Given the message from sulogin, this is highly likely. In fact, a
certainty. You are given a root shell so it is not surprising apt-get
works.

>  In such cases the root 
> account is locked and the user create during install is given sudo 
> powers.

The sudo package is installed and the user added to group sudo. If
"apt-get install gdm3" installed gd3 this is either a misobservetion
or the discovery of a massive security problem.


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/20121018122833.GA26295@desktop



Re: Newbie password problem(s)

2012-10-17 Thread songbird
Richard Owlett wrote:
...
> When rebooting into "Rescue Mode", the last two lines 
> displayed are:
> sulogin: root account is locked, starting shell
> root@localhost:~#
>
> At this point I'm allowed to do "apt-get install xyz" - no 
> password required.
>
>
> Comments, questions, suggestions?

  if you are already root and changing 
run levels i'm not sure it would take
you out of root so that makes sense to me.

  are you saying that you were not root
before changing run levels to single user
and it gives you these messages?

  and are you sure it is actually rebooting
instead of changing run levels?

  one is distinct from the other...

  if i am testing things out and need to
reboot i use:

# shutdown -r now

  to do a complete shut down before rebooting i use:

# shutdown -h now

which powers things off for my setup.


  songbird


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/lk83l9-3p@id-306963.user.uni-berlin.de



Re: Newbie password problem(s)

2012-10-17 Thread Andrei POPESCU
On Mi, 17 oct 12, 12:22:48, Richard Owlett wrote:
> 
> When rebooting into "Rescue Mode", the last two lines displayed are:
> sulogin: root account is locked, starting shell
> root@localhost:~#
> 
> At this point I'm allowed to do "apt-get install xyz" - no password
> required.
> 
> Comments, questions, suggestions?

I don't know for sure (never used this option), but this sounds like you 
left the root password blank during install. In such cases the root 
account is locked and the user create during install is given sudo 
powers.

Kind regards,
Andrei
-- 
Offtopic discussions among Debian users and developers:
http://lists.alioth.debian.org/mailman/listinfo/d-community-offtopic


signature.asc
Description: Digital signature