[Bug 26338] Re: Adding a user to a group modifies other users' groups and passwords
http://svn.gnome.org/viewvc/gnome-system- tools?view=revision&revision=4017 has the changes for gnome 2.20, so this should apply well to Gutsy. This should be fixed in all previous releases, too, although this will require some more serious backporting. ** Changed in: Ubuntu Dapper Status: New => Invalid ** Changed in: Ubuntu Edgy Status: New => Invalid ** Changed in: Ubuntu Feisty Status: New => Invalid ** Changed in: Ubuntu Gutsy Status: New => Invalid ** Changed in: gnome-system-tools (Ubuntu Gutsy) Importance: Undecided => High Assignee: (unassigned) => Martin Pitt (pitti) Status: New => In Progress Target: None => gutsy-updates -- Adding a user to a group modifies other users' groups and passwords https://bugs.launchpad.net/bugs/26338 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 26338] Re: Adding a user to a group modifies other users' groups and passwords
The bug has been fixed upstream now ** Changed in: gnome-system-tools (Ubuntu) Status: Confirmed => Fix Committed -- Adding a user to a group modifies other users' groups and passwords https://bugs.launchpad.net/bugs/26338 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 26338] Re: Adding a user to a group modifies other users' groups and passwords
The bug has been resolved upstream, see http://bugzilla.gnome.org/show_bug.cgi?id=489187#c2 -- Adding a user to a group modifies other users' groups and passwords https://bugs.launchpad.net/bugs/26338 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 26338] Re: Adding a user to a group modifies other users' groups and passwords
Greetings yesterday after system disk failure, I reinstalled my Debian box. The default enviroment was gdm and gnome. So I proceeded to add some user-accounts. After this and closing the user administration tool rebooted the system to make a change in boot device priority, in bios screen. After this, and booting in debian, I noticed that there was a message saying "chown: root/admin no souch group" or something like this. This one followed by a ton of other messages about udev, groups and so on. Logging as the first user, created during installation, there was a message about the sound server that it was unable to initialize. I decided to reinstall. Succesfull install was followed by full install of kde. So I tried to add users with kusers. This time there was no problem. So I think this is a nasty bug in the user-administration tool of Gnome solely. In my system there are two disks. One is system disk and the second is home disk. I didn't tried to reproduce the problem, but if you want I can send you detailed system configuration. Best regards and thank in advance for the permission to post the problem in your list Andreas -- Adding a user to a group modifies other users' groups and passwords https://bugs.launchpad.net/bugs/26338 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 26338] Re: Adding a user to a group modifies other users' groups and passwords
** Changed in: gst Status: Unknown => New -- Adding a user to a group modifies other users' groups and passwords https://bugs.launchpad.net/bugs/26338 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 26338] Re: Adding a user to a group modifies other users' groups and passwords
** Also affects: gst via http://bugzilla.gnome.org/show_bug.cgi?id=489187 Importance: Unknown Status: Unknown -- Adding a user to a group modifies other users' groups and passwords https://bugs.launchpad.net/bugs/26338 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
Re: [Bug 26338] Re: Adding a user to a group modifies other users' groups and passwords
My thanks too Yann, That is more or less what happened to me. On 10/22/07, Charles Twardy <[EMAIL PROTECTED]> wrote: > > Yann, > > Many thanks. > > -Charles > > On 10/22/07, Yann Rouillard <[EMAIL PROTECTED]> wrote: > > Ok I had some time to investigate what I discovered (in comment 68). > > Still not sure if it's the cause of this bug but I am now able to > > reliably reproduce a serious similar bug: > -- > Charles R. Twardy > Science is organized knowledge. Wisdom is organized life. ~Kant > > -- > Adding a user to a group modifies other users' groups and passwords > https://bugs.launchpad.net/bugs/26338 > You received this bug notification because you are a direct subscriber > of a duplicate bug. > -- Adding a user to a group modifies other users' groups and passwords https://bugs.launchpad.net/bugs/26338 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
Re: [Bug 26338] Re: Adding a user to a group modifies other users' groups and passwords
Yann, Many thanks. -Charles On 10/22/07, Yann Rouillard <[EMAIL PROTECTED]> wrote: > Ok I had some time to investigate what I discovered (in comment 68). > Still not sure if it's the cause of this bug but I am now able to > reliably reproduce a serious similar bug: -- Charles R. Twardy Science is organized knowledge. Wisdom is organized life. ~Kant -- Adding a user to a group modifies other users' groups and passwords https://bugs.launchpad.net/bugs/26338 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 26338] Re: Adding a user to a group modifies other users' groups and passwords
Ok I had some time to investigate what I discovered (in comment 68). Still not sure if it's the cause of this bug but I am now able to reliably reproduce a serious similar bug: 1. launch users-admin 2. create a test1 user 3. create a test2 user (with admin rights) 4. create a test3 user 5. delete the test1 user 6. delete the test3 user Here you go, test2 is no longer in the admin groups. I opened a bug upstream where I put a detailed explanation: http://bugzilla.gnome.org/show_bug.cgi?id=489187 -- Adding a user to a group modifies other users' groups and passwords https://bugs.launchpad.net/bugs/26338 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 26338] Re: Adding a user to a group modifies other users' groups and passwords
In reply to comment 67 (Yann Rouillard): I don't know if I have to file a separate bug for the behaviour I have described. Maybe some other developer can say that. After all, the fact is that system-tools-backend is not able to behave correctly as do the command line utilities in all the situations described for this bug. It seems that no one had problems with "adduser" and "deluser". So my question is: why don't make system-tools-backend act as a simple front-end to that commands? Is there any operation that the command line utilities are not able to do? Or are there other motivations? By the way, I can confirm that the bug is still present after a fresh installation of gutsy. -- Adding a user to a group modifies other users' groups and passwords https://bugs.launchpad.net/bugs/26338 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 26338] Re: Adding a user to a group modifies other users' groups and passwords
I maybe have found something in system-tools-backend which could explain this weird bug. system-tools-backends looks at the line number instead of the group name to see if a group have been deleted/added/modified. Just look at the set function in /usr/share/system-tools-backends-2.0/scripts/Users/Groups.pm I won't go into details but this behaviour works correctly only the first time. If you launch users-admin, delete a group and then create a new user (with a new group), system-tools-backends will try to delete another group and will try to rename several groups (which fail because the target group name already exists). /usr/share/system-tools-backends-2.0/scripts/Users/Users.pm seems to behave the same. I am not sure this is the cause of this bug, I still don't see in what conditions it could trigger this bug. -- Adding a user to a group modifies other users' groups and passwords https://bugs.launchpad.net/bugs/26338 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 26338] Re: Adding a user to a group modifies other users' groups and passwords
@Renzo Bagnati: I think your problem is a different one. Your AD users don't exist in /etc/passwd and unfortunately, the system- tools-backend only know how to retrieve information from /etc/passwd, so your AD users are considered invalid. When the "Users and Tools" configuration panel retrieve the members of a group, it only gets the valid ones. When you modify the group configuration, the whole /etc/group file is rewritten without the "invalid" ones as "Users and Tools" doesn't even know about them. The same bug should happens with a NIS setup I think. I think the good solution is to have system-tools-backend use the getent command rather than parse the /etc/passwd file. But maybe you should file a separate bug for this. -- Adding a user to a group modifies other users' groups and passwords https://bugs.launchpad.net/bugs/26338 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 26338] Re: Adding a user to a group modifies other users' groups and passwords
Since I manually changed some PAM config files for the setup described in comment 57, I'm also including these ones... Linux pc76 2.6.20-16-generic #2 SMP Sun Sep 23 19:50:39 UTC 2007 i686 GNU/Linux ** Attachment added: "pam_files.tgz" http://launchpadlibrarian.net/10064195/pam_files.tgz -- Adding a user to a group modifies other users' groups and passwords https://bugs.launchpad.net/bugs/26338 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 26338] Re: Adding a user to a group modifies other users' groups and passwords
My login.defs Linux pc76 2.6.20-16-generic #2 SMP Sun Sep 23 19:50:39 UTC 2007 i686 GNU/Linux ** Attachment added: "login.defs" http://launchpadlibrarian.net/10064187/login.defs -- Adding a user to a group modifies other users' groups and passwords https://bugs.launchpad.net/bugs/26338 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 26338] Re: Adding a user to a group modifies other users' groups and passwords
OK! Adding a /etc/login.defs for Ubuntu Feisty i686 > uname -a Linux Athena 2.6.20-16-386 #2 Thu Jun 7 20:16:13 UTC 2007 i686 GNU/Linux ** Attachment added: "login.defs for Ubuntu Feisty i686" http://launchpadlibrarian.net/10063924/login.defs -- Adding a user to a group modifies other users' groups and passwords https://bugs.launchpad.net/bugs/26338 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 26338] Re: Adding a user to a group modifies other users' groups and passwords
Can people who are affected by this please attach their /etc/login.defs? -- Adding a user to a group modifies other users' groups and passwords https://bugs.launchpad.net/bugs/26338 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 26338] Re: Adding a user to a group modifies other users' groups and passwords
** Changed in: gnome-system-tools (Ubuntu) Target: later => gutsy-updates -- Adding a user to a group modifies other users' groups and passwords https://bugs.launchpad.net/bugs/26338 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 26338] Re: Adding a user to a group modifies other users' groups and passwords
** Changed in: gnome-system-tools (Ubuntu) Target: ubuntu-7.10-rc => later -- Adding a user to a group modifies other users' groups and passwords https://bugs.launchpad.net/bugs/26338 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 26338] Re: Adding a user to a group modifies other users' groups and passwords
This is a bug since 2005 for crying out loud. Shouldn't somebody just simply review the whole code in the GUI (which creates this mess in the first place)? -- Adding a user to a group modifies other users' groups and passwords https://bugs.launchpad.net/bugs/26338 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
RE: [Bug 26338] Re: Adding a user to a group modifies other users' groups and passwords
> From: [EMAIL PROTECTED]> To: [EMAIL PROTECTED]> Date: Fri, 28 Sep 2007 20:05:40 +> Subject: [Bug 26338] Re: Adding a user to a group modifies other users' groups and passwords>> ** Changed in: gnome-system-tools (Ubuntu)> Target: ubuntu-7.10-beta => ubuntu-7.10-rc>> --> Adding a user to a group modifies other users' groups and passwords> https://bugs.launchpad.net/bugs/26338> You received this bug notification because you are a direct subscriber> of the bug. Thanks for the Update. Tom _ Explore the seven wonders of the world http://search.msn.com/results.aspx?q=7+wonders+world&mkt=en-US&form=QBRE -- Adding a user to a group modifies other users' groups and passwords https://bugs.launchpad.net/bugs/26338 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 26338] Re: Adding a user to a group modifies other users' groups and passwords
** Changed in: gnome-system-tools (Ubuntu) Target: ubuntu-7.10-beta => ubuntu-7.10-rc -- Adding a user to a group modifies other users' groups and passwords https://bugs.launchpad.net/bugs/26338 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
RE: [Bug 26338] Re: Adding a user to a group modifies other users' groups and passwords
I booted into recovery & changed password. Thanks for the help! Tom > From: [EMAIL PROTECTED]> To: [EMAIL PROTECTED]> Date: Fri, 14 Sep 2007 04:02:42 +> Subject: Re: [Bug 26338] Re: Adding a user to a group modifies other users' groups and passwords>> First, boot to recovery mode or boot from the CD again. That gives> you root access and you can change passwords using passwd. Also, you> can view /etc/group and /etc/passwd to see if your regular signon was> modified.>> Note: no one else here has yet reported a problem with the> *command-line* utilities, so check that the symptoms match, etc.>> -crt>> On 9/12/07, teach2471 wrote:>> terminal window, I used the command line & added some users via adduser.>> I shutdown my Pc succesfully. The following day, I tried to logon to>> ubuntu using my regular signon that I created upon installation(which is>> also the same one that I had been using for several days), I now get,>> Incorrect username or password. Any help would be appreciated.>> --> Adding a user to a group modifies other users' groups and passwords> https://bugs.launchpad.net/bugs/26338> You received this bug notification because you are a direct subscriber> of the bug. _ Kick back and relax with hot games and cool activities at the Messenger Café. http://www.cafemessenger.com?ocid=TXT_TAGLM_SeptWLtagline -- Adding a user to a group modifies other users' groups and passwords https://bugs.launchpad.net/bugs/26338 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
Re: [Bug 26338] Re: Adding a user to a group modifies other users' groups and passwords
First, boot to recovery mode or boot from the CD again. That gives you root access and you can change passwords using passwd. Also, you can view /etc/group and /etc/passwd to see if your regular signon was modified. Note: no one else here has yet reported a problem with the *command-line* utilities, so check that the symptoms match, etc. -crt On 9/12/07, teach2471 <[EMAIL PROTECTED]> wrote: > terminal window, I used the command line & added some users via adduser. > I shutdown my Pc succesfully. The following day, I tried to logon to > ubuntu using my regular signon that I created upon installation(which is > also the same one that I had been using for several days), I now get, > Incorrect username or password. Any help would be appreciated. -- Adding a user to a group modifies other users' groups and passwords https://bugs.launchpad.net/bugs/26338 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 26338] Re: Adding a user to a group modifies other users' groups and passwords
I also just downloaded wubi & installed ubuntu 7.04 onto my Windows XP machine and have been using ubuntu for several days. Then thru a terminal window, I used the command line & added some users via adduser. I shutdown my Pc succesfully. The following day, I tried to logon to ubuntu using my regular signon that I created upon installation(which is also the same one that I had been using for several days), I now get, Incorrect username or password. Any help would be appreciated. -- Adding a user to a group modifies other users' groups and passwords https://bugs.launchpad.net/bugs/26338 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 26338] Re: Adding a user to a group modifies other users' groups and passwords
** Changed in: gnome-system-tools (Ubuntu) Target: None => ubuntu-7.10-beta -- Adding a user to a group modifies other users' groups and passwords https://bugs.launchpad.net/bugs/26338 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 26338] Re: Adding a user to a group modifies other users' groups and passwords
I've experienced this bug in the following situation: at my workplace I've set up several machines running Ubuntu 7.04 and which are integrated in an Active Domain Network controlled by a Windows Server. I did this using samba, kerberos and winbind, and now these machines can be used with local and domain accounts (domain accounts are not listed in /etc/passwd but are managed by winbind). To allow some domain accounts to gain administrative privileges I added them manually to the admin group with 'adduser'. After that, if you use System -> Administration -> Users and Groups to add a new user, all the domain users (not local users) which were granted admin rights will lose their privileges. This happens because they are deleted from the admin group in /etc/group. The problem does not occur when using the command line utility (adduser). -- Adding a user to a group modifies other users' groups and passwords https://bugs.launchpad.net/bugs/26338 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
Re: [Bug 26338] Re: Adding a user to a group modifies other users' groups and passwords
Thanks. I sent this note over to the developer at Ubuntu who owns this bug. He may or may not be contacting you, On 9/4/07, zoobloik <[EMAIL PROTECTED]> wrote: > > Hi > I just installed Xubuntu 7.04 onto an old-ish laptop (that was previously > running an old release of slackware linux). The initial install wasn't too > painful (aside from problems with the disk partitioner returning failure > codes numerously, and the fact that the GUI network configurator didn't seem > to accomodate ad-hoc WLAN setup which meant me manually poking at the > /etc/network/interfaces file)... > > However, I too have just experienced the problem met by various other > people in this thread. After the full initial installation, my first > port of call was to add a new 'basic' user so that my family could do > basic login and have access to web-browsing etc... > > so.. i used the GUI tool, went in and selected the add user option, filled > out the details of the user then 'OK'd' everything. once i'd done this, i > logged out of xfce and then tried to login as the newly created user... i > was met with an error trying to log in saying that the account could not be > validated.. so i then logged in as my 'initial installation' user account to > try see what was going on. After logging in as the initial user.. i tried to > run the GUI user accounts tool again.. it prompted me for the administrative > password to access the utility.. i put in my usual password and was then met > with an error saying that i was not allowed to run this utility... to my > horror i subsequently discovered that i could not 'sudo' at all with this > account... > what seemed to be particularly drastic is that for some reason I noticed > that files in the /etc folder that would normally be root/root (i.e. > user/group of root) now seemed to have the ownership of (root/newuser) where > newuser was the uid of the account i had just tried to add (which did not > get added correctly) with the GUI tool > > as a stop-gap i have booted the live cd and i added my initial login to > the sudoers file as an 'ALL=(ALL) ALL' entry.. so i could actually be > productive again, and i once again ran the GUI user/group maintenance tool.. > upon going in here this time i observed that indeed a new group had been > added for the account i tried to set up... trying to remove this made the > tool complain that it was an administrator group, therefore i can only > imagine that it had relabelled the root group?? > i renamed this new group back to 'root' and i tried to add the user once > again with the tool and this time it seemed to add the user. > > since ubuntu seems 'weird' in its use of the root account and my > unfamiliarity with ubuntu, are the files that are retained for > administrator access (which are normally root/root on other linux > distros) also meant to be root/root in ubuntu? or is the group for these > meant to be something else? > > p.s. i'm still not sure if this stuff has caused any other havoc at > all... but to say such a fundamental tool can screw up so badly is a > pretty poor show really.. since i'm not a linux expert i've no idea to > what extent it has screwed stuff up and how it may have compromised my > system security. > > Its not something i plan to spend major amounts of time on as the > install was simply to be put on a laptop to allow my family access to > internet etc through WLAN... once that is setup i dont plan on touching > it much for a while.. > > i'd like to know how this could be so defective though... > > -- > Adding a user to a group modifies other users' groups and passwords > https://bugs.launchpad.net/bugs/26338 > You received this bug notification because you are a direct subscriber > of a duplicate bug. > -- Adding a user to a group modifies other users' groups and passwords https://bugs.launchpad.net/bugs/26338 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 26338] Re: Adding a user to a group modifies other users' groups and passwords
Hi I just installed Xubuntu 7.04 onto an old-ish laptop (that was previously running an old release of slackware linux). The initial install wasn't too painful (aside from problems with the disk partitioner returning failure codes numerously, and the fact that the GUI network configurator didn't seem to accomodate ad-hoc WLAN setup which meant me manually poking at the /etc/network/interfaces file)... However, I too have just experienced the problem met by various other people in this thread. After the full initial installation, my first port of call was to add a new 'basic' user so that my family could do basic login and have access to web-browsing etc... so.. i used the GUI tool, went in and selected the add user option, filled out the details of the user then 'OK'd' everything. once i'd done this, i logged out of xfce and then tried to login as the newly created user... i was met with an error trying to log in saying that the account could not be validated.. so i then logged in as my 'initial installation' user account to try see what was going on. After logging in as the initial user.. i tried to run the GUI user accounts tool again.. it prompted me for the administrative password to access the utility.. i put in my usual password and was then met with an error saying that i was not allowed to run this utility... to my horror i subsequently discovered that i could not 'sudo' at all with this account... what seemed to be particularly drastic is that for some reason I noticed that files in the /etc folder that would normally be root/root (i.e. user/group of root) now seemed to have the ownership of (root/newuser) where newuser was the uid of the account i had just tried to add (which did not get added correctly) with the GUI tool as a stop-gap i have booted the live cd and i added my initial login to the sudoers file as an 'ALL=(ALL) ALL' entry.. so i could actually be productive again, and i once again ran the GUI user/group maintenance tool.. upon going in here this time i observed that indeed a new group had been added for the account i tried to set up... trying to remove this made the tool complain that it was an administrator group, therefore i can only imagine that it had relabelled the root group?? i renamed this new group back to 'root' and i tried to add the user once again with the tool and this time it seemed to add the user. since ubuntu seems 'weird' in its use of the root account and my unfamiliarity with ubuntu, are the files that are retained for administrator access (which are normally root/root on other linux distros) also meant to be root/root in ubuntu? or is the group for these meant to be something else? p.s. i'm still not sure if this stuff has caused any other havoc at all... but to say such a fundamental tool can screw up so badly is a pretty poor show really.. since i'm not a linux expert i've no idea to what extent it has screwed stuff up and how it may have compromised my system security. Its not something i plan to spend major amounts of time on as the install was simply to be put on a laptop to allow my family access to internet etc through WLAN... once that is setup i dont plan on touching it much for a while.. i'd like to know how this could be so defective though... -- Adding a user to a group modifies other users' groups and passwords https://bugs.launchpad.net/bugs/26338 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 26338] Re: Adding a user to a group modifies other users' groups and passwords
Is this only a Dapper problem? I am not having any luck at all reproducing the problem in Gutsy under a VM. I have done 8 trials of various operations, and all did nothing but expected. Here's an easy test method: mkdir -p ~/trials/orig cd ~/trials/orig cp /etc/passwd . cp /etc/group . mkdir ../try1 # do some things in the Users and Groups applet cd ../try1 cp /etc/passwd . cp /etc/group . cd .. diff -u ./orig/passwd ./try1/passwd diff -u ./orig/group ./try1/group Examine results to see if it they make sense according to what you did in the applet. Rinse and repeat. Compare try1 with try2 next, try2 to try3, etc... -- Adding a user to a group modifies other users' groups and passwords https://bugs.launchpad.net/bugs/26338 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
Re: [Bug 26338] Re: Adding a user to a group modifies other users' groups and passwords
Charles Twardy [2007-07-17 1:03 -]: > Anyone have a fresh spare machine they can experiment on? Does this happen > from a fresh install? If there's extraneous entries in the files? If > you mix adduser and users-admin? Or useradd? Doing these experiments, and finding which steps lead to that breakage starting from a clean installation would be really appreciated, indeed. > I'd rather not muck around with my work system, as I'm not convinced I've > localized the damage. My office might be able to dig an old machine out > of storage, but I'm swamped for the next week at least. Using VirtualBox or VMWare with snapshots is an awesome and safe way of trying it out, BTW. -- Adding a user to a group modifies other users' groups and passwords https://bugs.launchpad.net/bugs/26338 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
Re: [Bug 26338] Re: Adding a user to a group modifies other users' groups and passwords
My machine was a fresh Dapper Drake install. The users in question were all newly created ones. I created users, then created groups. Then I started adding users to groups. After I exited the admin tool and saved the changes I went to configure the printer and could not. I tracked it back to rights issues with root - sudo was failing also. I don't believe it happens in the command line user admin tools - I used those to undo the damage. I recently tried v7.04 as a test drive and it had the same issue. On 7/16/07, Charles Twardy <[EMAIL PROTECTED]> wrote: > > Likewise, most of the reports did very simple things. I tried to add a new > user. (However, it's also likely that a defunct user of the same name was > in /etc/group or /etc/passwd because once upon a time those had been > copied from another machine.) > > But it stands to reason that it doesn't happen all the time, > or developers would have noticed that they lost sudo. > > Anyone have a fresh spare machine they can experiment on? Does this happen > from a fresh install? If there's extraneous entries in the files? If > you mix adduser and users-admin? Or useradd? > > I'd rather not muck around with my work system, as I'm not convinced I've > localized the damage. My office might be able to dig an old machine out > of storage, but I'm swamped for the next week at least. > > -Charles Twardy > > On Mon, 16 Jul 2007, David Green wrote: > > DG>Hmm Well it has been a while since I looked at it but all I did to > DG>create the bug was use the GUI user-admin too to reassign a user to a > DG>group. I noticed after that that directories the users should have had > DG>access to they did not. Further investigation showed that they were > not in > DG>the groups I'd put them in and I had to reset root's password to be > able to > DG>run sudo to fix things. > > -- > Charles R. Twardy > [EMAIL PROTECTED] > [EMAIL PROTECTED] > > -- > Adding a user to a group modifies other users' groups and passwords > https://bugs.launchpad.net/bugs/26338 > You received this bug notification because you are a direct subscriber > of a duplicate bug. > -- Adding a user to a group modifies other users' groups and passwords https://bugs.launchpad.net/bugs/26338 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
Re: [Bug 26338] Re: Adding a user to a group modifies other users' groups and passwords
Likewise, most of the reports did very simple things. I tried to add a new user. (However, it's also likely that a defunct user of the same name was in /etc/group or /etc/passwd because once upon a time those had been copied from another machine.) But it stands to reason that it doesn't happen all the time, or developers would have noticed that they lost sudo. Anyone have a fresh spare machine they can experiment on? Does this happen from a fresh install? If there's extraneous entries in the files? If you mix adduser and users-admin? Or useradd? I'd rather not muck around with my work system, as I'm not convinced I've localized the damage. My office might be able to dig an old machine out of storage, but I'm swamped for the next week at least. -Charles Twardy On Mon, 16 Jul 2007, David Green wrote: DG>Hmm Well it has been a while since I looked at it but all I did to DG>create the bug was use the GUI user-admin too to reassign a user to a DG>group. I noticed after that that directories the users should have had DG>access to they did not. Further investigation showed that they were not in DG>the groups I'd put them in and I had to reset root's password to be able to DG>run sudo to fix things. -- Charles R. Twardy [EMAIL PROTECTED] [EMAIL PROTECTED] -- Adding a user to a group modifies other users' groups and passwords https://bugs.launchpad.net/bugs/26338 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
Re: [Bug 26338] Re: Adding a user to a group modifies other users' groups and passwords
Hmm Well it has been a while since I looked at it but all I did to create the bug was use the GUI user-admin too to reassign a user to a group. I noticed after that that directories the users should have had access to they did not. Further investigation showed that they were not in the groups I'd put them in and I had to reset root's password to be able to run sudo to fix things. On 7/16/07, Martin Pitt <[EMAIL PROTECTED]> wrote: > > Hi David, > > David Green [2007-07-07 13:00 -]: > > Martin, > > > > Any updates on this bug and when it will be fixed? All I see on > Launchpad > > is that it has been marked as critical. I am still getting emails from > > other users that it is a problem and it seems a pretty critical one. > > Because of some of my company requirements until this bug is fixed I > can't > > use Ubuntu but would like to. > > I appreciate that this is a critical thing, but so far still nobody > could give a recipe for reproduction. I have never been able to > replicate this issue, so that we can examine it. > > -- > Adding a user to a group modifies other users' groups and passwords > https://bugs.launchpad.net/bugs/26338 > You received this bug notification because you are a direct subscriber > of a duplicate bug. > -- Adding a user to a group modifies other users' groups and passwords https://bugs.launchpad.net/bugs/26338 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
Re: [Bug 26338] Re: Adding a user to a group modifies other users' groups and passwords
Hi David, David Green [2007-07-07 13:00 -]: > Martin, > > Any updates on this bug and when it will be fixed? All I see on Launchpad > is that it has been marked as critical. I am still getting emails from > other users that it is a problem and it seems a pretty critical one. > Because of some of my company requirements until this bug is fixed I can't > use Ubuntu but would like to. I appreciate that this is a critical thing, but so far still nobody could give a recipe for reproduction. I have never been able to replicate this issue, so that we can examine it. -- Adding a user to a group modifies other users' groups and passwords https://bugs.launchpad.net/bugs/26338 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
Re: [Bug 26338] Re: Adding a user to a group modifies other users' groups and passwords
Charles, Thanks for the updates. It's been at least 8 months since I looked at this but I guess it is still not fixed. I had to drop Ubuntu since this bug meant it failed (miserably) my company's security criteria. thanks again, David On 7/12/07, Charles Twardy <[EMAIL PROTECTED]> wrote: > > > ** Attachment added: "Fixed-up /etc/group file" > http://launchpadlibrarian.net/8449998/fred2 > > -- > Adding a user to a group modifies other users' groups and passwords > https://bugs.launchpad.net/bugs/26338 > You received this bug notification because you are a direct subscriber > of a duplicate bug. > -- Adding a user to a group modifies other users' groups and passwords https://bugs.launchpad.net/bugs/26338 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 26338] Re: Adding a user to a group modifies other users' groups and passwords
** Attachment added: "Fixed-up /etc/group file" http://launchpadlibrarian.net/8449998/fred2 -- Adding a user to a group modifies other users' groups and passwords https://bugs.launchpad.net/bugs/26338 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 26338] Re: Adding a user to a group modifies other users' groups and passwords
=== Summary === I've just reviewed the duplicates, and marked a few others as duplicates. The problem seems to be that the graphical users-admin tool has some SEVERE bugs that make a system unusable and insecure. It makes several unintended changes to /etc/group under various conditions, including: * stripping group membership from all/many accounts when adding a new user * allowing non-admin accounts to change the root password * deleting accounts other than the selected one (?) Bug #64698 has a good statement of one manifestation. Symptoms include: * User no longer in sudoers (because no longer in admin) * Network failures (because haldaemon is no longer in appropriate groups) * Sound failures (because user and haldaemon are no longer in audio) * USB and other devices no longer working (haldaemon again) * Gnome login problems (audio? hal? networking?) Very likely this bug is causing a whole host of mysterious bugs that never got tracked back to /etc/group, because the symptoms are apparently unrelated. One method to recover: * Reboot to "recovery" mode (a.k.a. single-user) * Edit /etc/group: * add the appropriate accounts to "admin" and "audio" (etc) again * add "haldaemon" to: cdrom, floppy, audio, plugdev, powerdev (maybe others, but that's what I found) I am attaching my reconstructed /etc/group, to help people recover. I _appear_ to have everything working again (sound, network, gnome login, sudo) though I may yet have missed something, or your system may have other bits. It's been slightly anonymized -- users "daffy", "bugs", "marvin" and "donald" are fictitious. Hope this helps. Other possibilities including reinstalling hal and/or udev to reset those permissions. (sudo aptitude reinstall hal hal-device-manger). Mind you, I'm deleting "users-admin" from my system for now. ** Attachment added: "Fixed-up /etc/group file" http://launchpadlibrarian.net/8449978/group ** Attachment removed: "Fixed-up /etc/group file" http://launchpadlibrarian.net/8449978/group -- Adding a user to a group modifies other users' groups and passwords https://bugs.launchpad.net/bugs/26338 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
Re: [Bug 26338] Re: Adding a user to a group modifies other users' groups and passwords
Martin, Any updates on this bug and when it will be fixed? All I see on Launchpad is that it has been marked as critical. I am still getting emails from other users that it is a problem and it seems a pretty critical one. Because of some of my company requirements until this bug is fixed I can't use Ubuntu but would like to. On 12/12/06, Martin Pitt <[EMAIL PROTECTED]> wrote: > > David, your last concern is bug 59946, and in the process of being > fixed. > > -- > Adding a user to a group modifies other users' groups and passwords > https://launchpad.net/bugs/26338 > -- Adding a user to a group modifies other users' groups and passwords https://bugs.launchpad.net/bugs/26338 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 26338] Re: Adding a user to a group modifies other users' groups and passwords
Still a problem -- I just hosed my system trying to add a user. It
basically lost everyone's group membership. That knocked me out of
admin, and killed network functionality (especially gaim) because lots
of userids should be members of haldaemon, but no longer were. Not
knowing who had lost what, I poked around until, by removing and
reinstalling dbus and hal (etc.), I got network back. I still don't
have audio, because I haven't figured out which groups need what, or
what reinstall will fix my /etc/group. I had to reboot to single-user
("recovery") mode to add myself back to admin so I could sudo. What a
dreadful bug. Completely unexpected that a simple add user operation
would hose the system.
--
Adding a user to a group modifies other users' groups and passwords
https://bugs.launchpad.net/bugs/26338
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is a bug assignee.
--
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 26338] Re: Adding a user to a group modifies other users' groups and passwords
Andrew Ash, this bug is a problem, still. I use Ubuntu 7.04. I created new user (System -> Administration -> Users and Groups) and later my own user lost administrative power. I will reinstall the SO, but I should notified us. -- Adding a user to a group modifies other users' groups and passwords https://bugs.launchpad.net/bugs/26338 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 26338] Re: Adding a user to a group modifies other users' groups and passwords
This critical bug hasn't been touched in a while. Is it still a problem? -- Adding a user to a group modifies other users' groups and passwords https://bugs.launchpad.net/bugs/26338 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 26338] Re: Adding a user to a group modifies other users' groups and passwords
** This bug has been flagged as a security issue -- Adding a user to a group modifies other users' groups and passwords https://launchpad.net/bugs/26338 -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
Re: [Bug 26338] Re: Adding a user to a group modifies other users' groups and passwords
Martin, Thanks for the update. I'd kinda forgotten about this. :) David Green On 12/12/06, Martin Pitt <[EMAIL PROTECTED]> wrote: > > David, your last concern is bug 59946, and in the process of being > fixed. > > -- > Adding a user to a group modifies other users' groups and passwords > https://launchpad.net/bugs/26338 > -- Adding a user to a group modifies other users' groups and passwords https://launchpad.net/bugs/26338 -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 26338] Re: Adding a user to a group modifies other users' groups and passwords
David, your last concern is bug 59946, and in the process of being fixed. -- Adding a user to a group modifies other users' groups and passwords https://launchpad.net/bugs/26338 -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 26338] Re: Adding a user to a group modifies other users' groups and passwords
** Summary changed: - no automounting due to wrong hal group memberships + Adding a user to a group modifies other users' groups and passwords ** Changed in: gnome-system-tools (Ubuntu) Assignee: Martin Pitt => Ubuntu Desktop Bugs -- Adding a user to a group modifies other users' groups and passwords https://launchpad.net/bugs/26338 -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
