Your message dated Mon, 28 Sep 2026 10:14:57 -0700
with message-id <[email protected]>
and subject line Re: [Freedombox-pkg-team] Bug#1146448: freedombox in a systemd
container: BTRFS and LDAP
has caused the Debian Bug report #1146448,
regarding freedombox: Unable to add users - LDAP password does not work -
unable to add SSH public keys
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1146448: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1146448
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: freedombox
Version: 26.11.1~bpo13+1
Severity: normal
Dear Maintainer,
I'm installed freedombox in a systemd container. Networking is managed by
systemd.network
with NetworkManager configured to ignore all the interfaces. I needed to
install btrfs-progs.
I was then able to access the https://cass.6site0/freedombox URL and paste in
my secret.
I entered an account called owner and gave it a password. I performed an
upgrade.
I then tried to add some SSH keys and add a user. I received
some failure messages from the plinth logs.
Sep 01 18:18:13 cass freedombox[171]: » ssh..set_keys("owner", "", "owner",
****)
Sep 01 18:18:13 cass freedombox[171]: Error running action
ssh..set_keys("owner", "", "owner", ****): Permissi
onError("Invalid credentials")
Action traceback:
╞ File
"/usr/lib/python3/dist-packages/plinth/actions.py", line 501, i
n _privileged_call
╞ return_values =
func(*arguments['args'], **arguments['kwargs'])
╞ File
"/usr/lib/python3/dist-packages/plinth/modules/ssh/privileged.p
y", line 98, in set_keys
╞ _validate_user(auth_user,
auth_password, must_be_admin=must_be_adm
in)
╞
~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
^^^
╞ File
"/usr/lib/python3/dist-packages/plinth/modules/ssh/privileged.py", line 32, in
_validate_user
╞ raise PermissionError('Invalid
credentials')
Sep 01 18:18:14 cass freedombox[171]: GET /sys/users/owner/edit/
I may have incorrectly entered the owner password in that one, but later
Sep 01 18:18:14 cass freedombox[171]: GET /sys/users/owner/edit/
Sep 01 18:18:14 cass freedombox[171]: » ssh..get_keys("owner")
Sep 01 18:18:14 cass freedombox[171]: » users..get_group_users("admin")
Sep 01 18:20:25 cass freedombox[171]: POST /sys/users/owner/edit/
Sep 01 18:20:25 cass freedombox[171]: » ssh..get_keys("owner")
Sep 01 18:20:25 cass freedombox[171]: » users..get_group_users("admin")
Sep 01 18:20:25 cass freedombox[171]: » users..get_user_groups("owner")
Sep 01 18:20:25 cass freedombox[171]: » ssh..set_keys("owner", "ssh-ed25519
AAAAC3NzaC1lZDI1NTE5AAAAIJY8q6TDObPW524Vna/2UT6PBgV05nD5n77D+mbyVAnW
weaves-elliptic", "owner", ****)
Sep 01 18:20:25 cass freedombox[171]: Error running action
ssh..set_keys("owner", "ssh-ed25519
AAAAC3NzaC1lZDI1NTE5AAAAIJY8q6TDObPW524Vna/2UT6PBgV05nD5n77D+mbyVAnW
weaves-elliptic", "owner", ****): PermissionError("Invalid credentials")
Action traceback:
╞ File
"/usr/lib/python3/dist-packages/plinth/actions.py", line 501, in
_privileged_call
╞ return_values =
func(*arguments['args'], **arguments['kwargs'])
╞ File
"/usr/lib/python3/dist-packages/plinth/modules/ssh/privileged.py", line 98, in
set_keys
╞ _validate_user(auth_user,
auth_password, must_be_admin=must_be_admin)
╞
~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
╞ File
"/usr/lib/python3/dist-packages/plinth/modules/ssh/privileged.py", line 32, in
_validate_user
╞ raise PermissionError('Invalid
credentials')
Sep 01 18:20:25 cass freedombox[171]: GET /sys/users/owner/edit/
In that one, I may have gotten further. I did manage to get the notification
that the Authorization Password
worked, but something else failed.
I suspected that the LDAP password wasn't working because most of the error
were invalid credentials after an
LDAP operation.
I went out to the OS command line and tried to change the password of the only
account in LDAP the owner
account. And the LDAP password I entered during the LDAP/nslcd installation
didn't work.
The /etc/nslcd.conf file looks incomplete:
# The DN to bind with for normal lookups.
#binddn cn=annonymous,dc=example,dc=net
#bindpw secret
# The DN used for password modifications by root.
#rootpwmoddn cn=admin,dc=example,dc=com
Despite trying to create two users - neither appeared on the file system.
So I think it is a broken distribution. There's something wrong with the
linkage between plinth and
the LDAP.
-- System Information:
Debian Release: 13.6
APT prefers stable-updates
APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable')
Architecture: amd64 (x86_64)
Kernel: Linux 6.12.107+deb13-amd64 (SMP w/4 CPU threads; PREEMPT)
Kernel taint flags: TAINT_USER
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
Versions of packages freedombox depends on:
ii apache2 2.4.68-1~deb13u1
ii augeas-tools 1.14.1-1.1~deb13u1
ii avahi-daemon 0.8-16
ii avahi-utils 0.8-16
ii batctl 2025.0-2
ii bind9-dnsutils 1:9.20.26-1~deb13u1
ii borgbackup 1.4.0-5
ii certbot 4.0.0-2+deb13u1
ii cockpit 337-1+deb13u2
ii curl 8.14.1-2+deb13u4
ii debconf 1.5.91
ii debsecan 0.4.20.1
ii fail2ban 1.1.0-8
ii firewalld 2.3.1-1+deb13u1
ii fuse3 3.17.2-3
ii gdisk 1.0.10-2
ii gettext 0.23.1-2
ii gir1.2-glib-2.0 2.84.4-3~deb13u3
ii gir1.2-nm-1.0 1.52.1-1
ii gir1.2-udisks-2.0 2.10.1-12.1+deb13u2
ii gpg 2.4.7-21+deb13u1+b4
ii iproute2 6.15.0-1
ii javascript-common 12+nmu1
ii ldap-utils 2.6.10+dfsg-1
ii ldapscripts 2.0.8-2
ii libapache2-mod-auth-openidc 2.4.17-1
ii libglib2.0-bin 2.84.4-3~deb13u3
ii libjs-bootstrap5 5.3.5+dfsg-4
ii libjs-htmx 2.0.4-1
ii libnss-ldapd 0.9.13-1
ii libpam-ldapd 0.9.13-1
ii lsof 4.99.4+dfsg-2
ii needrestart 3.11-1
ii netcat-openbsd 1.229-1
ii network-manager 1.52.1-1
ii nftables 1.1.3-1
ii node-popper2 2.11.2-8
ii nslcd 0.9.13-1
ii openssh-server 1:10.0p1-7+deb13u4
ii openssl 3.5.7-1~deb13u2
ii parted 3.6-5
ii php-fpm 2:8.4+96
ii php8.4-fpm [php-fpm] 8.4.24-1~deb13u1
ii popularity-contest 1.78
ii ppp 2.5.2-1+1
ii pppoe 4.0-1
ii python3 3.13.5-1
ii python3-apt 3.0.0
ii python3-argon2 21.1.0-3
ii python3-augeas 1.2.0-1
ii python3-bootstrapform 3.4-9
ii python3-cherrypy3 18.10.0-1
ii python3-configobj 5.0.9-1
ii python3-dbus 1.4.0-1
ii python3-django 3:4.2.28-0+deb13u2
ii python3-django-axes 5.39.0-6
ii python3-django-bootstrapform 3.4-9
ii python3-django-captcha 0.6.2-1
ii python3-django-ipware 4.0.2-1
ii python3-django-oauth-toolkit 3.0.1-1
ii python3-django-stronghold 0.4.0+debian-2
ii python3-fido2 1.2.0-2
ii python3-gi 3.50.0-4+b1
ii python3-markupsafe 2.1.5-1+b3
ii python3-pampy 2.0.2-3
ii python3-pexpect 4.9-3
ii python3-psutil 7.0.0-2
ii python3-requests 2.32.3+dfsg-5+deb13u1
ii python3-ruamel.yaml 0.18.10+ds-1
ii python3-systemd 235-1+b6
ii python3-yaml 6.0.2-1+b2
ii samba-common-bin 2:4.22.10+dfsg-0+deb13u2
ii slapd 2.6.10+dfsg-1
ii snapper 0.10.6-1.2
ii sshfs 3.7.3-1.2~deb13u1
ii sshpass 1.10-0.1
ii ssl-cert 1.1.3
ii sudo 1.9.16p2-3+deb13u2
ii systemd [systemd-sysusers] 257.13-1~deb13u1
ii systemd-timesyncd 257.13-1~deb13u1
ii tdb-tools 2:1.4.13+samba4.22.10+dfsg-0+deb13u2
ii udisks2 2.10.1-12.1+deb13u2
ii unattended-upgrades 2.12
ii wget 1.25.0-2
ii zram-tools 0.3.7-1
Versions of packages freedombox recommends:
ii e2fsprogs 1.47.2-3+b11
ii firmware-ath9k-htc 1.4.0-110-ge888634+dfsg1-0.1
ii freedombox-doc-en 26.11.1~bpo13+1
ii freedombox-doc-es 26.11.1~bpo13+1
ii libnss-mdns 0.15.1-4+b1
ii libnss-myhostname 257.13-1~deb13u1
ii locales 2.41-12+deb13u3
ii locales-all 2.41-12+deb13u3
ii openssh-client 1:10.0p1-7+deb13u4
ii powermgmt-base 1.38
ii psmisc 23.7-2
freedombox suggests no packages.
-- no debconf information
--- End Message ---
--- Begin Message ---
On 9/25/26 16:01, Napoleon Bonaparte wrote:
Thanks for the advice you've given so far. I think the BTRFS tools are
needed because my systemd-container is built on /var/lib/machines which
is BTRFS and it tries to make subvolume snapshots.
I got to the bottom of my password issue. I had winbind installed and it
prefixed the username with the Windows Domain of my machine. I purged
winbind and I was able to su from a non-root account, give the password
I'd entered and access the admin account.
I then went to plinth and was able to create a new user.
So that's that fixed! Thanks for the help. Walter
Thank you for confirming that the problem is fixed. There is nothing to
be done in the freedombox package (btrfs-progs was only needed in your
situation). So, I am closing this. Feel free to reopen or file another
issue as needed.
--
Sunil
--- End Message ---
