[Bug 238755] Re: 'Account has expired' message when adding a new user

2008-07-24 Thread Thilo Six
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=389183

it has been changed in debian that way.
Don't know if it has been intentional introduced to Ubuntu.

-- 
'Account has expired' message when adding a new user
https://bugs.launchpad.net/bugs/238755
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 238755] Re: 'Account has expired' message when adding a new user

2008-07-24 Thread Thilo Six
the original intention of upstream has been to prevent ssh access where
the user has been locked.

Maybe a solution is to advance the patch to expire the account only if
$USER != root

That way the original intention is preserved without this somewhat
regression.

-- 
'Account has expired' message when adding a new user
https://bugs.launchpad.net/bugs/238755
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 238755] Re: 'Account has expired' message when adding a new user

2008-07-24 Thread Thilo Six
PS. Debian users also stumpleupon this change:
http://thread.gmane.org/gmane.linux.debian.user/330437

-- 
'Account has expired' message when adding a new user
https://bugs.launchpad.net/bugs/238755
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 238755] Re: 'Account has expired' message when adding a new user

2008-07-24 Thread Phillip Susi
Seems to me that chfn should not be trying to reauthenticate the calling
user.  Authentication is handled by the login program, so it should not
also be done by chfn.

A user that is unable to login for any reason ( could also just not be
allowed on this tty or something ) should still be able to chfn.

-- 
'Account has expired' message when adding a new user
https://bugs.launchpad.net/bugs/238755
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 238755] Re: 'Account has expired' message when adding a new user

2008-07-24 Thread Thilo Six
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=492307

-- 
'Account has expired' message when adding a new user
https://bugs.launchpad.net/bugs/238755
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 238755] Re: 'Account has expired' message when adding a new user

2008-07-25 Thread Thilo Six
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=492307

-- 
'Account has expired' message when adding a new user
https://bugs.launchpad.net/bugs/238755
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 238755] Re: 'Account has expired' message when adding a new user

2008-07-25 Thread Brian Murray
** Also affects: shadow (Debian) via
   http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=492307
   Importance: Unknown
   Status: Unknown

-- 
'Account has expired' message when adding a new user
https://bugs.launchpad.net/bugs/238755
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 238755] Re: 'Account has expired' message when adding a new user

2008-07-26 Thread Bug Watch Updater
** Changed in: shadow (Debian)
   Status: Unknown => New

-- 
'Account has expired' message when adding a new user
https://bugs.launchpad.net/bugs/238755
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 238755] Re: 'Account has expired' message when adding a new user

2008-07-26 Thread Thilo Six
http://thread.gmane.org/gmane.linux.debian.devel.release/21922

This means in debian it will be fixed shortly.

SRU anybody?

-- 
'Account has expired' message when adding a new user
https://bugs.launchpad.net/bugs/238755
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 238755] Re: 'Account has expired' message when adding a new user

2008-07-27 Thread Bug Watch Updater
** Changed in: shadow (Debian)
   Status: New => Fix Released

-- 
'Account has expired' message when adding a new user
https://bugs.launchpad.net/bugs/238755
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 238755] Re: 'Account has expired' message when adding a new user

2008-07-28 Thread Thilo Six
packages.debian.org already has passwd 1:4.1.1-3

changelog (the parts that matters here):

   * debian/patches/494_passwd_lock-no_account_lock: Restore the previous
 behavior of passwd -l (which changed in #389183): only lock the user's
 password, not the user's account. Also explicitly document the
 differences. This restores a behavior common with the previous versions of
 passwd and with other implementations. Closes: #492307

-- 
'Account has expired' message when adding a new user
https://bugs.launchpad.net/bugs/238755
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 238755] Re: 'Account has expired' message when adding a new user

2008-07-28 Thread Thilo Six
summary:

* cronjobs are broken for system that has a 'passwd -l root' with hardy
   http://thread.gmane.org/gmane.linux.debian.user/330437

* the implematation of the patch that changed  'passwd -l' is broken:
   http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=492307

* + the confusion it causes at users-side due to unexpeted behaviour.

All of this is fixed in debian now. For hardy this all is imho a serve
regression.

Pls devs fix it.

-- 
'Account has expired' message when adding a new user
https://bugs.launchpad.net/bugs/238755
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 238755] Re: 'Account has expired' message when adding a new user

2008-07-20 Thread Andreas Simon
Forgot to mention: The error is _not_ there when I unlock the root
account with 'sudo passwd root'. chfn fails only when root is locked via
'passwd -l root'.

-- 
'Account has expired' message when adding a new user
https://bugs.launchpad.net/bugs/238755
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 238755] Re: 'Account has expired' message when adding a new user

2008-07-20 Thread Andreas Simon
Changing the package from 'adduser' to 'shadow' as the actual command
which fails is /usr/bin/chfn which originates from the shadow source
package.

** Changed in: shadow (Ubuntu)
Sourcepackagename: adduser => shadow

-- 
'Account has expired' message when adding a new user
https://bugs.launchpad.net/bugs/238755
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 238755] Re: 'Account has expired' message when adding a new user

2008-07-20 Thread Andreas Simon
I have the same error, when trying to use chfn. This also has the neat
effect, that it breaks installation of mysql-server, as the pre-install
script fails.

This is the command, which fails during the mysql-server pre-installation 
script:
$ sudo /usr/bin/chfn -f 'MySQL Server' mysql
Your account has expired; please contact your system administrator
chfn: PAM authentication failed

I get the same error when trying to chfn any other user or use adduser:

$ sudo adduser foobar
Adding user `foobar' ...
Adding new group `foobar' (1001) ...
Adding new user `foobar' (1001) with group `foobar' ...
Creating home directory `/home/foobar' ...
Copying files from `/etc/skel' ...
Enter new UNIX password: 
Retype new UNIX password: 
passwd: password updated successfully
Your account has expired; please contact your system administrator
chfn: PAM authentication failed
adduser: `/usr/bin/chfn foobar' returned error code 1. Exiting.

I too started with a non-disabled root acount, because I installed Ubuntu via 
debootstrap (no dmraid support in any of Ubuntu's installers).
Thus I locked the root account via 'passwd -l root' later just as aledin did.


** Changed in: adduser (Ubuntu)
   Status: New => Confirmed

-- 
'Account has expired' message when adding a new user
https://bugs.launchpad.net/bugs/238755
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 238755] Re: 'Account has expired' message when adding a new user

2008-07-20 Thread Nicolas François
I don't think there is a bug. This looks like a configuration issue.

When it is called, chfn authenticates the calling user (root), and then
check if the calling user's is valid.

Being root is sufficient to get authenticated (pam_rootok is loaded in
/etc/pam.d/chfn), but /etc/pam.d/comman-account will still check that
the account is valid, and in your case it is no more valid (because of
the passwd -l root)

You should unlock the root account (passwd --unlock root), then lock the
root's password (usermod --lock root)

-- 
'Account has expired' message when adding a new user
https://bugs.launchpad.net/bugs/238755
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 238755] Re: 'Account has expired' message when adding a new user

2008-07-20 Thread Andreas Simon
Yes, this is an configuration issue. By default Ubuntu's root account is
disabled and chfn should surely handle this configuration and just work.
But it does not.

https://help.ubuntu.com/community/RootSudo tells to execute 'passwd -l
root' to "re-disable" the root account. As I understand it this is
Ubuntu's default configuration and chfn fails to work with it.

-- 
'Account has expired' message when adding a new user
https://bugs.launchpad.net/bugs/238755
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 238755] Re: 'Account has expired' message when adding a new user

2008-06-10 Thread Kees Cook
** Visibility changed to: Public

** This bug is no longer flagged as a security issue

-- 
'Account has expired' message when adding a new user
https://bugs.launchpad.net/bugs/238755
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 238755] Re: 'Account has expired' message when adding a new user

2008-06-24 Thread aledin
Me too. I have this problem with adduser from the time when I enabled the root 
user (sudo passwd root) and then disabled it (sudo passwd -l root).
Hope this info will help.

-- 
'Account has expired' message when adding a new user
https://bugs.launchpad.net/bugs/238755
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 238755] Re: 'Account has expired' message when adding a new user

2008-07-24 Thread Thilo Six
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=389183

it has been changed in debian that way.
Don't know if it has been intentional introduced to Ubuntu.

-- 
'Account has expired' message when adding a new user
https://bugs.launchpad.net/bugs/238755
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 238755] Re: 'Account has expired' message when adding a new user

2008-07-24 Thread Thilo Six
the original intention of upstream has been to prevent ssh access where
the user has been locked.

Maybe a solution is to advance the patch to expire the account only if
$USER != root

That way the original intention is preserved without this somewhat
regression.

-- 
'Account has expired' message when adding a new user
https://bugs.launchpad.net/bugs/238755
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 238755] Re: 'Account has expired' message when adding a new user

2008-07-24 Thread Thilo Six
PS. Debian users also stumpleupon this change:
http://thread.gmane.org/gmane.linux.debian.user/330437

-- 
'Account has expired' message when adding a new user
https://bugs.launchpad.net/bugs/238755
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 238755] Re: 'Account has expired' message when adding a new user

2008-07-24 Thread Phillip Susi
Seems to me that chfn should not be trying to reauthenticate the calling
user.  Authentication is handled by the login program, so it should not
also be done by chfn.

A user that is unable to login for any reason ( could also just not be
allowed on this tty or something ) should still be able to chfn.

-- 
'Account has expired' message when adding a new user
https://bugs.launchpad.net/bugs/238755
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 238755] Re: 'Account has expired' message when adding a new user

2008-07-24 Thread Thilo Six
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=492307

-- 
'Account has expired' message when adding a new user
https://bugs.launchpad.net/bugs/238755
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 238755] Re: 'Account has expired' message when adding a new user

2008-07-25 Thread Thilo Six
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=492307

-- 
'Account has expired' message when adding a new user
https://bugs.launchpad.net/bugs/238755
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 238755] Re: 'Account has expired' message when adding a new user

2008-07-25 Thread Brian Murray
** Also affects: shadow (Debian) via
   http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=492307
   Importance: Unknown
   Status: Unknown

-- 
'Account has expired' message when adding a new user
https://bugs.launchpad.net/bugs/238755
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 238755] Re: 'Account has expired' message when adding a new user

2008-07-26 Thread Bug Watch Updater
** Changed in: shadow (Debian)
   Status: Unknown => New

-- 
'Account has expired' message when adding a new user
https://bugs.launchpad.net/bugs/238755
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 238755] Re: 'Account has expired' message when adding a new user

2008-07-26 Thread Thilo Six
http://thread.gmane.org/gmane.linux.debian.devel.release/21922

This means in debian it will be fixed shortly.

SRU anybody?

-- 
'Account has expired' message when adding a new user
https://bugs.launchpad.net/bugs/238755
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 238755] Re: 'Account has expired' message when adding a new user

2008-07-27 Thread Bug Watch Updater
** Changed in: shadow (Debian)
   Status: New => Fix Released

-- 
'Account has expired' message when adding a new user
https://bugs.launchpad.net/bugs/238755
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 238755] Re: 'Account has expired' message when adding a new user

2008-07-28 Thread Thilo Six
packages.debian.org already has passwd 1:4.1.1-3

changelog (the parts that matters here):

   * debian/patches/494_passwd_lock-no_account_lock: Restore the previous
 behavior of passwd -l (which changed in #389183): only lock the user's
 password, not the user's account. Also explicitly document the
 differences. This restores a behavior common with the previous versions of
 passwd and with other implementations. Closes: #492307

-- 
'Account has expired' message when adding a new user
https://bugs.launchpad.net/bugs/238755
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 238755] Re: 'Account has expired' message when adding a new user

2008-07-28 Thread Thilo Six
summary:

* cronjobs are broken for system that has a 'passwd -l root' with hardy
   http://thread.gmane.org/gmane.linux.debian.user/330437

* the implematation of the patch that changed  'passwd -l' is broken:
   http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=492307

* + the confusion it causes at users-side due to unexpeted behaviour.

All of this is fixed in debian now. For hardy this all is imho a serve
regression.

Pls devs fix it.

-- 
'Account has expired' message when adding a new user
https://bugs.launchpad.net/bugs/238755
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 238755] Re: 'Account has expired' message when adding a new user

2008-07-20 Thread Andreas Simon
Forgot to mention: The error is _not_ there when I unlock the root
account with 'sudo passwd root'. chfn fails only when root is locked via
'passwd -l root'.

-- 
'Account has expired' message when adding a new user
https://bugs.launchpad.net/bugs/238755
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 238755] Re: 'Account has expired' message when adding a new user

2008-07-20 Thread Andreas Simon
Changing the package from 'adduser' to 'shadow' as the actual command
which fails is /usr/bin/chfn which originates from the shadow source
package.

** Changed in: shadow (Ubuntu)
Sourcepackagename: adduser => shadow

-- 
'Account has expired' message when adding a new user
https://bugs.launchpad.net/bugs/238755
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 238755] Re: 'Account has expired' message when adding a new user

2008-07-20 Thread Andreas Simon
I have the same error, when trying to use chfn. This also has the neat
effect, that it breaks installation of mysql-server, as the pre-install
script fails.

This is the command, which fails during the mysql-server pre-installation 
script:
$ sudo /usr/bin/chfn -f 'MySQL Server' mysql
Your account has expired; please contact your system administrator
chfn: PAM authentication failed

I get the same error when trying to chfn any other user or use adduser:

$ sudo adduser foobar
Adding user `foobar' ...
Adding new group `foobar' (1001) ...
Adding new user `foobar' (1001) with group `foobar' ...
Creating home directory `/home/foobar' ...
Copying files from `/etc/skel' ...
Enter new UNIX password: 
Retype new UNIX password: 
passwd: password updated successfully
Your account has expired; please contact your system administrator
chfn: PAM authentication failed
adduser: `/usr/bin/chfn foobar' returned error code 1. Exiting.

I too started with a non-disabled root acount, because I installed Ubuntu via 
debootstrap (no dmraid support in any of Ubuntu's installers).
Thus I locked the root account via 'passwd -l root' later just as aledin did.


** Changed in: adduser (Ubuntu)
   Status: New => Confirmed

-- 
'Account has expired' message when adding a new user
https://bugs.launchpad.net/bugs/238755
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 238755] Re: 'Account has expired' message when adding a new user

2008-07-20 Thread Nicolas François
I don't think there is a bug. This looks like a configuration issue.

When it is called, chfn authenticates the calling user (root), and then
check if the calling user's is valid.

Being root is sufficient to get authenticated (pam_rootok is loaded in
/etc/pam.d/chfn), but /etc/pam.d/comman-account will still check that
the account is valid, and in your case it is no more valid (because of
the passwd -l root)

You should unlock the root account (passwd --unlock root), then lock the
root's password (usermod --lock root)

-- 
'Account has expired' message when adding a new user
https://bugs.launchpad.net/bugs/238755
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 238755] Re: 'Account has expired' message when adding a new user

2008-07-20 Thread Andreas Simon
Yes, this is an configuration issue. By default Ubuntu's root account is
disabled and chfn should surely handle this configuration and just work.
But it does not.

https://help.ubuntu.com/community/RootSudo tells to execute 'passwd -l
root' to "re-disable" the root account. As I understand it this is
Ubuntu's default configuration and chfn fails to work with it.

-- 
'Account has expired' message when adding a new user
https://bugs.launchpad.net/bugs/238755
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 238755] Re: 'Account has expired' message when adding a new user

2008-06-10 Thread Kees Cook
** Visibility changed to: Public

** This bug is no longer flagged as a security issue

-- 
'Account has expired' message when adding a new user
https://bugs.launchpad.net/bugs/238755
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 238755] Re: 'Account has expired' message when adding a new user

2008-06-24 Thread aledin
Me too. I have this problem with adduser from the time when I enabled the root 
user (sudo passwd root) and then disabled it (sudo passwd -l root).
Hope this info will help.

-- 
'Account has expired' message when adding a new user
https://bugs.launchpad.net/bugs/238755
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 238755] Re: 'Account has expired' message when adding a new user

2008-07-24 Thread Thilo Six
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=389183

it has been changed in debian that way.
Don't know if it has been intentional introduced to Ubuntu.

-- 
'Account has expired' message when adding a new user
https://bugs.launchpad.net/bugs/238755
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 238755] Re: 'Account has expired' message when adding a new user

2008-07-24 Thread Thilo Six
the original intention of upstream has been to prevent ssh access where
the user has been locked.

Maybe a solution is to advance the patch to expire the account only if
$USER != root

That way the original intention is preserved without this somewhat
regression.

-- 
'Account has expired' message when adding a new user
https://bugs.launchpad.net/bugs/238755
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 238755] Re: 'Account has expired' message when adding a new user

2008-07-24 Thread Thilo Six
PS. Debian users also stumpleupon this change:
http://thread.gmane.org/gmane.linux.debian.user/330437

-- 
'Account has expired' message when adding a new user
https://bugs.launchpad.net/bugs/238755
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 238755] Re: 'Account has expired' message when adding a new user

2008-07-24 Thread Phillip Susi
Seems to me that chfn should not be trying to reauthenticate the calling
user.  Authentication is handled by the login program, so it should not
also be done by chfn.

A user that is unable to login for any reason ( could also just not be
allowed on this tty or something ) should still be able to chfn.

-- 
'Account has expired' message when adding a new user
https://bugs.launchpad.net/bugs/238755
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 238755] Re: 'Account has expired' message when adding a new user

2008-07-24 Thread Thilo Six
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=492307

-- 
'Account has expired' message when adding a new user
https://bugs.launchpad.net/bugs/238755
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 238755] Re: 'Account has expired' message when adding a new user

2008-07-25 Thread Thilo Six
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=492307

-- 
'Account has expired' message when adding a new user
https://bugs.launchpad.net/bugs/238755
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 238755] Re: 'Account has expired' message when adding a new user

2008-07-25 Thread Brian Murray
** Also affects: shadow (Debian) via
   http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=492307
   Importance: Unknown
   Status: Unknown

-- 
'Account has expired' message when adding a new user
https://bugs.launchpad.net/bugs/238755
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 238755] Re: 'Account has expired' message when adding a new user

2008-07-26 Thread Bug Watch Updater
** Changed in: shadow (Debian)
   Status: Unknown => New

-- 
'Account has expired' message when adding a new user
https://bugs.launchpad.net/bugs/238755
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 238755] Re: 'Account has expired' message when adding a new user

2008-07-26 Thread Thilo Six
http://thread.gmane.org/gmane.linux.debian.devel.release/21922

This means in debian it will be fixed shortly.

SRU anybody?

-- 
'Account has expired' message when adding a new user
https://bugs.launchpad.net/bugs/238755
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 238755] Re: 'Account has expired' message when adding a new user

2008-07-27 Thread Bug Watch Updater
** Changed in: shadow (Debian)
   Status: New => Fix Released

-- 
'Account has expired' message when adding a new user
https://bugs.launchpad.net/bugs/238755
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 238755] Re: 'Account has expired' message when adding a new user

2008-07-28 Thread Thilo Six
packages.debian.org already has passwd 1:4.1.1-3

changelog (the parts that matters here):

   * debian/patches/494_passwd_lock-no_account_lock: Restore the previous
 behavior of passwd -l (which changed in #389183): only lock the user's
 password, not the user's account. Also explicitly document the
 differences. This restores a behavior common with the previous versions of
 passwd and with other implementations. Closes: #492307

-- 
'Account has expired' message when adding a new user
https://bugs.launchpad.net/bugs/238755
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 238755] Re: 'Account has expired' message when adding a new user

2008-07-28 Thread Thilo Six
summary:

* cronjobs are broken for system that has a 'passwd -l root' with hardy
   http://thread.gmane.org/gmane.linux.debian.user/330437

* the implematation of the patch that changed  'passwd -l' is broken:
   http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=492307

* + the confusion it causes at users-side due to unexpeted behaviour.

All of this is fixed in debian now. For hardy this all is imho a serve
regression.

Pls devs fix it.

-- 
'Account has expired' message when adding a new user
https://bugs.launchpad.net/bugs/238755
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 238755] Re: 'Account has expired' message when adding a new user

2008-07-20 Thread Andreas Simon
Forgot to mention: The error is _not_ there when I unlock the root
account with 'sudo passwd root'. chfn fails only when root is locked via
'passwd -l root'.

-- 
'Account has expired' message when adding a new user
https://bugs.launchpad.net/bugs/238755
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 238755] Re: 'Account has expired' message when adding a new user

2008-07-20 Thread Andreas Simon
Changing the package from 'adduser' to 'shadow' as the actual command
which fails is /usr/bin/chfn which originates from the shadow source
package.

** Changed in: shadow (Ubuntu)
Sourcepackagename: adduser => shadow

-- 
'Account has expired' message when adding a new user
https://bugs.launchpad.net/bugs/238755
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 238755] Re: 'Account has expired' message when adding a new user

2008-07-20 Thread Andreas Simon
I have the same error, when trying to use chfn. This also has the neat
effect, that it breaks installation of mysql-server, as the pre-install
script fails.

This is the command, which fails during the mysql-server pre-installation 
script:
$ sudo /usr/bin/chfn -f 'MySQL Server' mysql
Your account has expired; please contact your system administrator
chfn: PAM authentication failed

I get the same error when trying to chfn any other user or use adduser:

$ sudo adduser foobar
Adding user `foobar' ...
Adding new group `foobar' (1001) ...
Adding new user `foobar' (1001) with group `foobar' ...
Creating home directory `/home/foobar' ...
Copying files from `/etc/skel' ...
Enter new UNIX password: 
Retype new UNIX password: 
passwd: password updated successfully
Your account has expired; please contact your system administrator
chfn: PAM authentication failed
adduser: `/usr/bin/chfn foobar' returned error code 1. Exiting.

I too started with a non-disabled root acount, because I installed Ubuntu via 
debootstrap (no dmraid support in any of Ubuntu's installers).
Thus I locked the root account via 'passwd -l root' later just as aledin did.


** Changed in: adduser (Ubuntu)
   Status: New => Confirmed

-- 
'Account has expired' message when adding a new user
https://bugs.launchpad.net/bugs/238755
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 238755] Re: 'Account has expired' message when adding a new user

2008-07-20 Thread Nicolas François
I don't think there is a bug. This looks like a configuration issue.

When it is called, chfn authenticates the calling user (root), and then
check if the calling user's is valid.

Being root is sufficient to get authenticated (pam_rootok is loaded in
/etc/pam.d/chfn), but /etc/pam.d/comman-account will still check that
the account is valid, and in your case it is no more valid (because of
the passwd -l root)

You should unlock the root account (passwd --unlock root), then lock the
root's password (usermod --lock root)

-- 
'Account has expired' message when adding a new user
https://bugs.launchpad.net/bugs/238755
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 238755] Re: 'Account has expired' message when adding a new user

2008-07-20 Thread Andreas Simon
Yes, this is an configuration issue. By default Ubuntu's root account is
disabled and chfn should surely handle this configuration and just work.
But it does not.

https://help.ubuntu.com/community/RootSudo tells to execute 'passwd -l
root' to "re-disable" the root account. As I understand it this is
Ubuntu's default configuration and chfn fails to work with it.

-- 
'Account has expired' message when adding a new user
https://bugs.launchpad.net/bugs/238755
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 238755] Re: 'Account has expired' message when adding a new user

2008-06-24 Thread aledin
Me too. I have this problem with adduser from the time when I enabled the root 
user (sudo passwd root) and then disabled it (sudo passwd -l root).
Hope this info will help.

-- 
'Account has expired' message when adding a new user
https://bugs.launchpad.net/bugs/238755
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 238755] Re: 'Account has expired' message when adding a new user

2008-06-10 Thread Kees Cook
** Visibility changed to: Public

** This bug is no longer flagged as a security issue

-- 
'Account has expired' message when adding a new user
https://bugs.launchpad.net/bugs/238755
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 238755] Re: 'Account has expired' message when adding a new user

2008-07-24 Thread Thilo Six
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=389183

it has been changed in debian that way.
Don't know if it has been intentional introduced to Ubuntu.

-- 
'Account has expired' message when adding a new user
https://bugs.launchpad.net/bugs/238755
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 238755] Re: 'Account has expired' message when adding a new user

2008-07-24 Thread Thilo Six
the original intention of upstream has been to prevent ssh access where
the user has been locked.

Maybe a solution is to advance the patch to expire the account only if
$USER != root

That way the original intention is preserved without this somewhat
regression.

-- 
'Account has expired' message when adding a new user
https://bugs.launchpad.net/bugs/238755
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 238755] Re: 'Account has expired' message when adding a new user

2008-07-24 Thread Thilo Six
PS. Debian users also stumpleupon this change:
http://thread.gmane.org/gmane.linux.debian.user/330437

-- 
'Account has expired' message when adding a new user
https://bugs.launchpad.net/bugs/238755
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 238755] Re: 'Account has expired' message when adding a new user

2008-07-24 Thread Phillip Susi
Seems to me that chfn should not be trying to reauthenticate the calling
user.  Authentication is handled by the login program, so it should not
also be done by chfn.

A user that is unable to login for any reason ( could also just not be
allowed on this tty or something ) should still be able to chfn.

-- 
'Account has expired' message when adding a new user
https://bugs.launchpad.net/bugs/238755
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 238755] Re: 'Account has expired' message when adding a new user

2008-07-24 Thread Thilo Six
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=492307

-- 
'Account has expired' message when adding a new user
https://bugs.launchpad.net/bugs/238755
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 238755] Re: 'Account has expired' message when adding a new user

2008-07-25 Thread Thilo Six
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=492307

-- 
'Account has expired' message when adding a new user
https://bugs.launchpad.net/bugs/238755
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 238755] Re: 'Account has expired' message when adding a new user

2008-07-25 Thread Brian Murray
** Also affects: shadow (Debian) via
   http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=492307
   Importance: Unknown
   Status: Unknown

-- 
'Account has expired' message when adding a new user
https://bugs.launchpad.net/bugs/238755
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 238755] Re: 'Account has expired' message when adding a new user

2008-07-26 Thread Bug Watch Updater
** Changed in: shadow (Debian)
   Status: Unknown => New

-- 
'Account has expired' message when adding a new user
https://bugs.launchpad.net/bugs/238755
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 238755] Re: 'Account has expired' message when adding a new user

2008-07-26 Thread Thilo Six
http://thread.gmane.org/gmane.linux.debian.devel.release/21922

This means in debian it will be fixed shortly.

SRU anybody?

-- 
'Account has expired' message when adding a new user
https://bugs.launchpad.net/bugs/238755
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 238755] Re: 'Account has expired' message when adding a new user

2008-07-27 Thread Bug Watch Updater
** Changed in: shadow (Debian)
   Status: New => Fix Released

-- 
'Account has expired' message when adding a new user
https://bugs.launchpad.net/bugs/238755
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 238755] Re: 'Account has expired' message when adding a new user

2008-07-28 Thread Thilo Six
packages.debian.org already has passwd 1:4.1.1-3

changelog (the parts that matters here):

   * debian/patches/494_passwd_lock-no_account_lock: Restore the previous
 behavior of passwd -l (which changed in #389183): only lock the user's
 password, not the user's account. Also explicitly document the
 differences. This restores a behavior common with the previous versions of
 passwd and with other implementations. Closes: #492307

-- 
'Account has expired' message when adding a new user
https://bugs.launchpad.net/bugs/238755
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 238755] Re: 'Account has expired' message when adding a new user

2008-07-28 Thread Thilo Six
summary:

* cronjobs are broken for system that has a 'passwd -l root' with hardy
   http://thread.gmane.org/gmane.linux.debian.user/330437

* the implematation of the patch that changed  'passwd -l' is broken:
   http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=492307

* + the confusion it causes at users-side due to unexpeted behaviour.

All of this is fixed in debian now. For hardy this all is imho a serve
regression.

Pls devs fix it.

-- 
'Account has expired' message when adding a new user
https://bugs.launchpad.net/bugs/238755
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 238755] Re: 'Account has expired' message when adding a new user

2008-07-20 Thread Andreas Simon
Forgot to mention: The error is _not_ there when I unlock the root
account with 'sudo passwd root'. chfn fails only when root is locked via
'passwd -l root'.

-- 
'Account has expired' message when adding a new user
https://bugs.launchpad.net/bugs/238755
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 238755] Re: 'Account has expired' message when adding a new user

2008-07-20 Thread Andreas Simon
Changing the package from 'adduser' to 'shadow' as the actual command
which fails is /usr/bin/chfn which originates from the shadow source
package.

** Changed in: shadow (Ubuntu)
Sourcepackagename: adduser => shadow

-- 
'Account has expired' message when adding a new user
https://bugs.launchpad.net/bugs/238755
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 238755] Re: 'Account has expired' message when adding a new user

2008-07-20 Thread Andreas Simon
I have the same error, when trying to use chfn. This also has the neat
effect, that it breaks installation of mysql-server, as the pre-install
script fails.

This is the command, which fails during the mysql-server pre-installation 
script:
$ sudo /usr/bin/chfn -f 'MySQL Server' mysql
Your account has expired; please contact your system administrator
chfn: PAM authentication failed

I get the same error when trying to chfn any other user or use adduser:

$ sudo adduser foobar
Adding user `foobar' ...
Adding new group `foobar' (1001) ...
Adding new user `foobar' (1001) with group `foobar' ...
Creating home directory `/home/foobar' ...
Copying files from `/etc/skel' ...
Enter new UNIX password: 
Retype new UNIX password: 
passwd: password updated successfully
Your account has expired; please contact your system administrator
chfn: PAM authentication failed
adduser: `/usr/bin/chfn foobar' returned error code 1. Exiting.

I too started with a non-disabled root acount, because I installed Ubuntu via 
debootstrap (no dmraid support in any of Ubuntu's installers).
Thus I locked the root account via 'passwd -l root' later just as aledin did.


** Changed in: adduser (Ubuntu)
   Status: New => Confirmed

-- 
'Account has expired' message when adding a new user
https://bugs.launchpad.net/bugs/238755
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 238755] Re: 'Account has expired' message when adding a new user

2008-07-20 Thread Nicolas François
I don't think there is a bug. This looks like a configuration issue.

When it is called, chfn authenticates the calling user (root), and then
check if the calling user's is valid.

Being root is sufficient to get authenticated (pam_rootok is loaded in
/etc/pam.d/chfn), but /etc/pam.d/comman-account will still check that
the account is valid, and in your case it is no more valid (because of
the passwd -l root)

You should unlock the root account (passwd --unlock root), then lock the
root's password (usermod --lock root)

-- 
'Account has expired' message when adding a new user
https://bugs.launchpad.net/bugs/238755
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 238755] Re: 'Account has expired' message when adding a new user

2008-07-20 Thread Andreas Simon
Yes, this is an configuration issue. By default Ubuntu's root account is
disabled and chfn should surely handle this configuration and just work.
But it does not.

https://help.ubuntu.com/community/RootSudo tells to execute 'passwd -l
root' to "re-disable" the root account. As I understand it this is
Ubuntu's default configuration and chfn fails to work with it.

-- 
'Account has expired' message when adding a new user
https://bugs.launchpad.net/bugs/238755
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 238755] Re: 'Account has expired' message when adding a new user

2008-07-24 Thread Thilo Six
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=389183

it has been changed in debian that way.
Don't know if it has been intentional introduced to Ubuntu.

-- 
'Account has expired' message when adding a new user
https://bugs.launchpad.net/bugs/238755
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 238755] Re: 'Account has expired' message when adding a new user

2008-07-24 Thread Thilo Six
the original intention of upstream has been to prevent ssh access where
the user has been locked.

Maybe a solution is to advance the patch to expire the account only if
$USER != root

That way the original intention is preserved without this somewhat
regression.

-- 
'Account has expired' message when adding a new user
https://bugs.launchpad.net/bugs/238755
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 238755] Re: 'Account has expired' message when adding a new user

2008-07-24 Thread Thilo Six
PS. Debian users also stumpleupon this change:
http://thread.gmane.org/gmane.linux.debian.user/330437

-- 
'Account has expired' message when adding a new user
https://bugs.launchpad.net/bugs/238755
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 238755] Re: 'Account has expired' message when adding a new user

2008-07-24 Thread Phillip Susi
Seems to me that chfn should not be trying to reauthenticate the calling
user.  Authentication is handled by the login program, so it should not
also be done by chfn.

A user that is unable to login for any reason ( could also just not be
allowed on this tty or something ) should still be able to chfn.

-- 
'Account has expired' message when adding a new user
https://bugs.launchpad.net/bugs/238755
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 238755] Re: 'Account has expired' message when adding a new user

2008-07-24 Thread Thilo Six
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=492307

-- 
'Account has expired' message when adding a new user
https://bugs.launchpad.net/bugs/238755
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 238755] Re: 'Account has expired' message when adding a new user

2008-07-25 Thread Thilo Six
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=492307

-- 
'Account has expired' message when adding a new user
https://bugs.launchpad.net/bugs/238755
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 238755] Re: 'Account has expired' message when adding a new user

2008-07-25 Thread Brian Murray
** Also affects: shadow (Debian) via
   http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=492307
   Importance: Unknown
   Status: Unknown

-- 
'Account has expired' message when adding a new user
https://bugs.launchpad.net/bugs/238755
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 238755] Re: 'Account has expired' message when adding a new user

2008-07-26 Thread Bug Watch Updater
** Changed in: shadow (Debian)
   Status: Unknown => New

-- 
'Account has expired' message when adding a new user
https://bugs.launchpad.net/bugs/238755
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 238755] Re: 'Account has expired' message when adding a new user

2008-07-26 Thread Thilo Six
http://thread.gmane.org/gmane.linux.debian.devel.release/21922

This means in debian it will be fixed shortly.

SRU anybody?

-- 
'Account has expired' message when adding a new user
https://bugs.launchpad.net/bugs/238755
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 238755] Re: 'Account has expired' message when adding a new user

2008-07-27 Thread Bug Watch Updater
** Changed in: shadow (Debian)
   Status: New => Fix Released

-- 
'Account has expired' message when adding a new user
https://bugs.launchpad.net/bugs/238755
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 238755] Re: 'Account has expired' message when adding a new user

2008-07-28 Thread Thilo Six
packages.debian.org already has passwd 1:4.1.1-3

changelog (the parts that matters here):

   * debian/patches/494_passwd_lock-no_account_lock: Restore the previous
 behavior of passwd -l (which changed in #389183): only lock the user's
 password, not the user's account. Also explicitly document the
 differences. This restores a behavior common with the previous versions of
 passwd and with other implementations. Closes: #492307

-- 
'Account has expired' message when adding a new user
https://bugs.launchpad.net/bugs/238755
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 238755] Re: 'Account has expired' message when adding a new user

2008-07-28 Thread Thilo Six
summary:

* cronjobs are broken for system that has a 'passwd -l root' with hardy
   http://thread.gmane.org/gmane.linux.debian.user/330437

* the implematation of the patch that changed  'passwd -l' is broken:
   http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=492307

* + the confusion it causes at users-side due to unexpeted behaviour.

All of this is fixed in debian now. For hardy this all is imho a serve
regression.

Pls devs fix it.

-- 
'Account has expired' message when adding a new user
https://bugs.launchpad.net/bugs/238755
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 238755] Re: 'Account has expired' message when adding a new user

2008-07-20 Thread Andreas Simon
Forgot to mention: The error is _not_ there when I unlock the root
account with 'sudo passwd root'. chfn fails only when root is locked via
'passwd -l root'.

-- 
'Account has expired' message when adding a new user
https://bugs.launchpad.net/bugs/238755
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 238755] Re: 'Account has expired' message when adding a new user

2008-07-20 Thread Andreas Simon
Changing the package from 'adduser' to 'shadow' as the actual command
which fails is /usr/bin/chfn which originates from the shadow source
package.

** Changed in: shadow (Ubuntu)
Sourcepackagename: adduser => shadow

-- 
'Account has expired' message when adding a new user
https://bugs.launchpad.net/bugs/238755
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 238755] Re: 'Account has expired' message when adding a new user

2008-07-20 Thread Andreas Simon
I have the same error, when trying to use chfn. This also has the neat
effect, that it breaks installation of mysql-server, as the pre-install
script fails.

This is the command, which fails during the mysql-server pre-installation 
script:
$ sudo /usr/bin/chfn -f 'MySQL Server' mysql
Your account has expired; please contact your system administrator
chfn: PAM authentication failed

I get the same error when trying to chfn any other user or use adduser:

$ sudo adduser foobar
Adding user `foobar' ...
Adding new group `foobar' (1001) ...
Adding new user `foobar' (1001) with group `foobar' ...
Creating home directory `/home/foobar' ...
Copying files from `/etc/skel' ...
Enter new UNIX password: 
Retype new UNIX password: 
passwd: password updated successfully
Your account has expired; please contact your system administrator
chfn: PAM authentication failed
adduser: `/usr/bin/chfn foobar' returned error code 1. Exiting.

I too started with a non-disabled root acount, because I installed Ubuntu via 
debootstrap (no dmraid support in any of Ubuntu's installers).
Thus I locked the root account via 'passwd -l root' later just as aledin did.


** Changed in: adduser (Ubuntu)
   Status: New => Confirmed

-- 
'Account has expired' message when adding a new user
https://bugs.launchpad.net/bugs/238755
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 238755] Re: 'Account has expired' message when adding a new user

2008-07-20 Thread Nicolas François
I don't think there is a bug. This looks like a configuration issue.

When it is called, chfn authenticates the calling user (root), and then
check if the calling user's is valid.

Being root is sufficient to get authenticated (pam_rootok is loaded in
/etc/pam.d/chfn), but /etc/pam.d/comman-account will still check that
the account is valid, and in your case it is no more valid (because of
the passwd -l root)

You should unlock the root account (passwd --unlock root), then lock the
root's password (usermod --lock root)

-- 
'Account has expired' message when adding a new user
https://bugs.launchpad.net/bugs/238755
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 238755] Re: 'Account has expired' message when adding a new user

2008-07-20 Thread Andreas Simon
Yes, this is an configuration issue. By default Ubuntu's root account is
disabled and chfn should surely handle this configuration and just work.
But it does not.

https://help.ubuntu.com/community/RootSudo tells to execute 'passwd -l
root' to "re-disable" the root account. As I understand it this is
Ubuntu's default configuration and chfn fails to work with it.

-- 
'Account has expired' message when adding a new user
https://bugs.launchpad.net/bugs/238755
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 238755] Re: 'Account has expired' message when adding a new user

2008-07-24 Thread Thilo Six
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=389183

it has been changed in debian that way.
Don't know if it has been intentional introduced to Ubuntu.

-- 
'Account has expired' message when adding a new user
https://bugs.launchpad.net/bugs/238755
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 238755] Re: 'Account has expired' message when adding a new user

2008-07-24 Thread Thilo Six
the original intention of upstream has been to prevent ssh access where
the user has been locked.

Maybe a solution is to advance the patch to expire the account only if
$USER != root

That way the original intention is preserved without this somewhat
regression.

-- 
'Account has expired' message when adding a new user
https://bugs.launchpad.net/bugs/238755
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 238755] Re: 'Account has expired' message when adding a new user

2008-07-24 Thread Thilo Six
PS. Debian users also stumpleupon this change:
http://thread.gmane.org/gmane.linux.debian.user/330437

-- 
'Account has expired' message when adding a new user
https://bugs.launchpad.net/bugs/238755
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 238755] Re: 'Account has expired' message when adding a new user

2008-07-24 Thread Phillip Susi
Seems to me that chfn should not be trying to reauthenticate the calling
user.  Authentication is handled by the login program, so it should not
also be done by chfn.

A user that is unable to login for any reason ( could also just not be
allowed on this tty or something ) should still be able to chfn.

-- 
'Account has expired' message when adding a new user
https://bugs.launchpad.net/bugs/238755
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 238755] Re: 'Account has expired' message when adding a new user

2008-07-24 Thread Thilo Six
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=492307

-- 
'Account has expired' message when adding a new user
https://bugs.launchpad.net/bugs/238755
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 238755] Re: 'Account has expired' message when adding a new user

2008-07-25 Thread Thilo Six
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=492307

-- 
'Account has expired' message when adding a new user
https://bugs.launchpad.net/bugs/238755
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 238755] Re: 'Account has expired' message when adding a new user

2008-07-25 Thread Brian Murray
** Also affects: shadow (Debian) via
   http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=492307
   Importance: Unknown
   Status: Unknown

-- 
'Account has expired' message when adding a new user
https://bugs.launchpad.net/bugs/238755
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 238755] Re: 'Account has expired' message when adding a new user

2008-07-26 Thread Bug Watch Updater
** Changed in: shadow (Debian)
   Status: Unknown => New

-- 
'Account has expired' message when adding a new user
https://bugs.launchpad.net/bugs/238755
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 238755] Re: 'Account has expired' message when adding a new user

2008-07-26 Thread Thilo Six
http://thread.gmane.org/gmane.linux.debian.devel.release/21922

This means in debian it will be fixed shortly.

SRU anybody?

-- 
'Account has expired' message when adding a new user
https://bugs.launchpad.net/bugs/238755
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


  1   2   >