Re: [Bug 26338] Re: Adding a user to a group modifies other users' groups and passwords
Yann, Many thanks. -Charles On 10/22/07, Yann Rouillard [EMAIL PROTECTED] wrote: Ok I had some time to investigate what I discovered (in comment 68). Still not sure if it's the cause of this bug but I am now able to reliably reproduce a serious similar bug: -- Charles R. Twardy Science is organized knowledge. Wisdom is organized life. ~Kant -- Adding a user to a group modifies other users' groups and passwords https://bugs.launchpad.net/bugs/26338 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
Re: [Bug 26338] Re: Adding a user to a group modifies other users' groups and passwords
My thanks too Yann, That is more or less what happened to me. On 10/22/07, Charles Twardy [EMAIL PROTECTED] wrote: Yann, Many thanks. -Charles On 10/22/07, Yann Rouillard [EMAIL PROTECTED] wrote: Ok I had some time to investigate what I discovered (in comment 68). Still not sure if it's the cause of this bug but I am now able to reliably reproduce a serious similar bug: -- Charles R. Twardy Science is organized knowledge. Wisdom is organized life. ~Kant -- Adding a user to a group modifies other users' groups and passwords https://bugs.launchpad.net/bugs/26338 You received this bug notification because you are a direct subscriber of a duplicate bug. -- Adding a user to a group modifies other users' groups and passwords https://bugs.launchpad.net/bugs/26338 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
RE: [Bug 26338] Re: Adding a user to a group modifies other users' groups and passwords
From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Date: Fri, 28 Sep 2007 20:05:40 + Subject: [Bug 26338] Re: Adding a user to a group modifies other users' groups and passwords ** Changed in: gnome-system-tools (Ubuntu) Target: ubuntu-7.10-beta = ubuntu-7.10-rc -- Adding a user to a group modifies other users' groups and passwords https://bugs.launchpad.net/bugs/26338 You received this bug notification because you are a direct subscriber of the bug. Thanks for the Update. Tom _ Explore the seven wonders of the world http://search.msn.com/results.aspx?q=7+wonders+worldmkt=en-USform=QBRE -- Adding a user to a group modifies other users' groups and passwords https://bugs.launchpad.net/bugs/26338 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
RE: [Bug 26338] Re: Adding a user to a group modifies other users' groups and passwords
I booted into recovery changed password. Thanks for the help! Tom From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Date: Fri, 14 Sep 2007 04:02:42 + Subject: Re: [Bug 26338] Re: Adding a user to a group modifies other users' groups and passwords First, boot to recovery mode or boot from the CD again. That gives you root access and you can change passwords using passwd. Also, you can view /etc/group and /etc/passwd to see if your regular signon was modified. Note: no one else here has yet reported a problem with the *command-line* utilities, so check that the symptoms match, etc. -crt On 9/12/07, teach2471 wrote: terminal window, I used the command line added some users via adduser. I shutdown my Pc succesfully. The following day, I tried to logon to ubuntu using my regular signon that I created upon installation(which is also the same one that I had been using for several days), I now get, Incorrect username or password. Any help would be appreciated. -- Adding a user to a group modifies other users' groups and passwords https://bugs.launchpad.net/bugs/26338 You received this bug notification because you are a direct subscriber of the bug. _ Kick back and relax with hot games and cool activities at the Messenger Café. http://www.cafemessenger.com?ocid=TXT_TAGLM_SeptWLtagline -- Adding a user to a group modifies other users' groups and passwords https://bugs.launchpad.net/bugs/26338 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
Re: [Bug 26338] Re: Adding a user to a group modifies other users' groups and passwords
First, boot to recovery mode or boot from the CD again. That gives you root access and you can change passwords using passwd. Also, you can view /etc/group and /etc/passwd to see if your regular signon was modified. Note: no one else here has yet reported a problem with the *command-line* utilities, so check that the symptoms match, etc. -crt On 9/12/07, teach2471 [EMAIL PROTECTED] wrote: terminal window, I used the command line added some users via adduser. I shutdown my Pc succesfully. The following day, I tried to logon to ubuntu using my regular signon that I created upon installation(which is also the same one that I had been using for several days), I now get, Incorrect username or password. Any help would be appreciated. -- Adding a user to a group modifies other users' groups and passwords https://bugs.launchpad.net/bugs/26338 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
Re: [Bug 26338] Re: Adding a user to a group modifies other users' groups and passwords
Thanks. I sent this note over to the developer at Ubuntu who owns this bug. He may or may not be contacting you, On 9/4/07, zoobloik [EMAIL PROTECTED] wrote: Hi I just installed Xubuntu 7.04 onto an old-ish laptop (that was previously running an old release of slackware linux). The initial install wasn't too painful (aside from problems with the disk partitioner returning failure codes numerously, and the fact that the GUI network configurator didn't seem to accomodate ad-hoc WLAN setup which meant me manually poking at the /etc/network/interfaces file)... However, I too have just experienced the problem met by various other people in this thread. After the full initial installation, my first port of call was to add a new 'basic' user so that my family could do basic login and have access to web-browsing etc... so.. i used the GUI tool, went in and selected the add user option, filled out the details of the user then 'OK'd' everything. once i'd done this, i logged out of xfce and then tried to login as the newly created user... i was met with an error trying to log in saying that the account could not be validated.. so i then logged in as my 'initial installation' user account to try see what was going on. After logging in as the initial user.. i tried to run the GUI user accounts tool again.. it prompted me for the administrative password to access the utility.. i put in my usual password and was then met with an error saying that i was not allowed to run this utility... to my horror i subsequently discovered that i could not 'sudo' at all with this account... what seemed to be particularly drastic is that for some reason I noticed that files in the /etc folder that would normally be root/root (i.e. user/group of root) now seemed to have the ownership of (root/newuser) where newuser was the uid of the account i had just tried to add (which did not get added correctly) with the GUI tool as a stop-gap i have booted the live cd and i added my initial login to the sudoers file as an 'ALL=(ALL) ALL' entry.. so i could actually be productive again, and i once again ran the GUI user/group maintenance tool.. upon going in here this time i observed that indeed a new group had been added for the account i tried to set up... trying to remove this made the tool complain that it was an administrator group, therefore i can only imagine that it had relabelled the root group?? i renamed this new group back to 'root' and i tried to add the user once again with the tool and this time it seemed to add the user. since ubuntu seems 'weird' in its use of the root account and my unfamiliarity with ubuntu, are the files that are retained for administrator access (which are normally root/root on other linux distros) also meant to be root/root in ubuntu? or is the group for these meant to be something else? p.s. i'm still not sure if this stuff has caused any other havoc at all... but to say such a fundamental tool can screw up so badly is a pretty poor show really.. since i'm not a linux expert i've no idea to what extent it has screwed stuff up and how it may have compromised my system security. Its not something i plan to spend major amounts of time on as the install was simply to be put on a laptop to allow my family access to internet etc through WLAN... once that is setup i dont plan on touching it much for a while.. i'd like to know how this could be so defective though... -- Adding a user to a group modifies other users' groups and passwords https://bugs.launchpad.net/bugs/26338 You received this bug notification because you are a direct subscriber of a duplicate bug. -- Adding a user to a group modifies other users' groups and passwords https://bugs.launchpad.net/bugs/26338 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
Re: [Bug 26338] Re: Adding a user to a group modifies other users' groups and passwords
Charles Twardy [2007-07-17 1:03 -]: Anyone have a fresh spare machine they can experiment on? Does this happen from a fresh install? If there's extraneous entries in the files? If you mix adduser and users-admin? Or useradd? Doing these experiments, and finding which steps lead to that breakage starting from a clean installation would be really appreciated, indeed. I'd rather not muck around with my work system, as I'm not convinced I've localized the damage. My office might be able to dig an old machine out of storage, but I'm swamped for the next week at least. Using VirtualBox or VMWare with snapshots is an awesome and safe way of trying it out, BTW. -- Adding a user to a group modifies other users' groups and passwords https://bugs.launchpad.net/bugs/26338 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
Re: [Bug 26338] Re: Adding a user to a group modifies other users' groups and passwords
Hi David, David Green [2007-07-07 13:00 -]: Martin, Any updates on this bug and when it will be fixed? All I see on Launchpad is that it has been marked as critical. I am still getting emails from other users that it is a problem and it seems a pretty critical one. Because of some of my company requirements until this bug is fixed I can't use Ubuntu but would like to. I appreciate that this is a critical thing, but so far still nobody could give a recipe for reproduction. I have never been able to replicate this issue, so that we can examine it. -- Adding a user to a group modifies other users' groups and passwords https://bugs.launchpad.net/bugs/26338 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
Re: [Bug 26338] Re: Adding a user to a group modifies other users' groups and passwords
Hmm Well it has been a while since I looked at it but all I did to create the bug was use the GUI user-admin too to reassign a user to a group. I noticed after that that directories the users should have had access to they did not. Further investigation showed that they were not in the groups I'd put them in and I had to reset root's password to be able to run sudo to fix things. On 7/16/07, Martin Pitt [EMAIL PROTECTED] wrote: Hi David, David Green [2007-07-07 13:00 -]: Martin, Any updates on this bug and when it will be fixed? All I see on Launchpad is that it has been marked as critical. I am still getting emails from other users that it is a problem and it seems a pretty critical one. Because of some of my company requirements until this bug is fixed I can't use Ubuntu but would like to. I appreciate that this is a critical thing, but so far still nobody could give a recipe for reproduction. I have never been able to replicate this issue, so that we can examine it. -- Adding a user to a group modifies other users' groups and passwords https://bugs.launchpad.net/bugs/26338 You received this bug notification because you are a direct subscriber of a duplicate bug. -- Adding a user to a group modifies other users' groups and passwords https://bugs.launchpad.net/bugs/26338 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
Re: [Bug 26338] Re: Adding a user to a group modifies other users' groups and passwords
Likewise, most of the reports did very simple things. I tried to add a new user. (However, it's also likely that a defunct user of the same name was in /etc/group or /etc/passwd because once upon a time those had been copied from another machine.) But it stands to reason that it doesn't happen all the time, or developers would have noticed that they lost sudo. Anyone have a fresh spare machine they can experiment on? Does this happen from a fresh install? If there's extraneous entries in the files? If you mix adduser and users-admin? Or useradd? I'd rather not muck around with my work system, as I'm not convinced I've localized the damage. My office might be able to dig an old machine out of storage, but I'm swamped for the next week at least. -Charles Twardy On Mon, 16 Jul 2007, David Green wrote: DGHmm Well it has been a while since I looked at it but all I did to DGcreate the bug was use the GUI user-admin too to reassign a user to a DGgroup. I noticed after that that directories the users should have had DGaccess to they did not. Further investigation showed that they were not in DGthe groups I'd put them in and I had to reset root's password to be able to DGrun sudo to fix things. -- Charles R. Twardy [EMAIL PROTECTED] [EMAIL PROTECTED] -- Adding a user to a group modifies other users' groups and passwords https://bugs.launchpad.net/bugs/26338 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
Re: [Bug 26338] Re: Adding a user to a group modifies other users' groups and passwords
My machine was a fresh Dapper Drake install. The users in question were all newly created ones. I created users, then created groups. Then I started adding users to groups. After I exited the admin tool and saved the changes I went to configure the printer and could not. I tracked it back to rights issues with root - sudo was failing also. I don't believe it happens in the command line user admin tools - I used those to undo the damage. I recently tried v7.04 as a test drive and it had the same issue. On 7/16/07, Charles Twardy [EMAIL PROTECTED] wrote: Likewise, most of the reports did very simple things. I tried to add a new user. (However, it's also likely that a defunct user of the same name was in /etc/group or /etc/passwd because once upon a time those had been copied from another machine.) But it stands to reason that it doesn't happen all the time, or developers would have noticed that they lost sudo. Anyone have a fresh spare machine they can experiment on? Does this happen from a fresh install? If there's extraneous entries in the files? If you mix adduser and users-admin? Or useradd? I'd rather not muck around with my work system, as I'm not convinced I've localized the damage. My office might be able to dig an old machine out of storage, but I'm swamped for the next week at least. -Charles Twardy On Mon, 16 Jul 2007, David Green wrote: DGHmm Well it has been a while since I looked at it but all I did to DGcreate the bug was use the GUI user-admin too to reassign a user to a DGgroup. I noticed after that that directories the users should have had DGaccess to they did not. Further investigation showed that they were not in DGthe groups I'd put them in and I had to reset root's password to be able to DGrun sudo to fix things. -- Charles R. Twardy [EMAIL PROTECTED] [EMAIL PROTECTED] -- Adding a user to a group modifies other users' groups and passwords https://bugs.launchpad.net/bugs/26338 You received this bug notification because you are a direct subscriber of a duplicate bug. -- Adding a user to a group modifies other users' groups and passwords https://bugs.launchpad.net/bugs/26338 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
Re: [Bug 26338] Re: Adding a user to a group modifies other users' groups and passwords
Charles, Thanks for the updates. It's been at least 8 months since I looked at this but I guess it is still not fixed. I had to drop Ubuntu since this bug meant it failed (miserably) my company's security criteria. thanks again, David On 7/12/07, Charles Twardy [EMAIL PROTECTED] wrote: ** Attachment added: Fixed-up /etc/group file http://launchpadlibrarian.net/8449998/fred2 -- Adding a user to a group modifies other users' groups and passwords https://bugs.launchpad.net/bugs/26338 You received this bug notification because you are a direct subscriber of a duplicate bug. -- Adding a user to a group modifies other users' groups and passwords https://bugs.launchpad.net/bugs/26338 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
Re: [Bug 26338] Re: Adding a user to a group modifies other users' groups and passwords
Martin, Any updates on this bug and when it will be fixed? All I see on Launchpad is that it has been marked as critical. I am still getting emails from other users that it is a problem and it seems a pretty critical one. Because of some of my company requirements until this bug is fixed I can't use Ubuntu but would like to. On 12/12/06, Martin Pitt [EMAIL PROTECTED] wrote: David, your last concern is bug 59946, and in the process of being fixed. -- Adding a user to a group modifies other users' groups and passwords https://launchpad.net/bugs/26338 -- Adding a user to a group modifies other users' groups and passwords https://bugs.launchpad.net/bugs/26338 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
Re: [Bug 26338] Re: Adding a user to a group modifies other users' groups and passwords
Martin, Thanks for the update. I'd kinda forgotten about this. :) David Green On 12/12/06, Martin Pitt [EMAIL PROTECTED] wrote: David, your last concern is bug 59946, and in the process of being fixed. -- Adding a user to a group modifies other users' groups and passwords https://launchpad.net/bugs/26338 -- Adding a user to a group modifies other users' groups and passwords https://launchpad.net/bugs/26338 -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs