Subject: passwd -l regression from #389183 Package: passwd Version: 1:4.1.1-2 Severity: important
*** Please type your report below this line *** Hello in http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=389183 a patch to passwd had been introduced, which sets the expiry flag to locked accounts. Now: lenny:~# whoami root lenny:~# head -1 /etc/shadow root:$1$PfGgqPXx$EEhX5V1pTYd1hbr8j6wl.1:14085:0:99999:7::: lenny:~# LANG=C passwd -l root Password changed. lenny:~# head -1 /etc/shadow root:!$1$dnJSdUJb$kE6tQO.fAeSUl2hoOTPWQ1:14085:0:99999:7::1: lenny:~# LANG=C passwd Enter new UNIX password: Retype new UNIX password: passwd: password updated successfully lenny:~# head -1 /etc/shadow root:$1$dnJSdUJb$kE6tQO.fAeSUl2hoOTPWQ1:14085:0:99999:7::1: as you can see the flag isn't removed again when the account is reopend later again. second there are users who have problems when installing in expert mode and set the "install without root" option: http://thread.gmane.org/gmane.linux.debian.user/330437 with cronjobs and therelike. Imho this is a regression in passwd. Instead to entangle the -l and the -e into one option that doesn't work for all it maybe would be better to document the background of #389183 in the manpage (maybe nearby the -l option) and revert that change. -- System Information: Debian Release: lenny/sid APT prefers testing-proposed-updates APT policy: (500, 'testing-proposed-updates'), (500, 'testing') Architecture: i386 (i686) Kernel: Linux 2.6.25-2-686 (SMP w/1 CPU core) Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/bash Versions of packages passwd depends on: ii debianutils 2.30 Miscellaneous utilities specific t ii libc6 2.7-10 GNU C Library: Shared libraries ii libpam-modules 0.99.7.1-6 Pluggable Authentication Modules f ii libpam0g 0.99.7.1-6 Pluggable Authentication Modules l ii libselinux1 2.0.59-1 SELinux shared libraries passwd recommends no packages. passwd suggests no packages. -- no debconf information -- bye Thilo key: 0x4A411E09 -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

