Please see the comments below from upstream:

1.  


Hi John. It seems like --system already implies --disabled-password, so 
the only thing --disabled-login gets us is it prevents people from 
logging on as rabbitmq via ssh keys (if they were to set that up). I'll 
raise a bug here, but it seems pretty low priority to me.

2.

FWIW we've now done this. But it's even more esoteric than I thought - 
since Debian defaults UsePAM to Yes in sshd_config, it will make no 
difference at all for most people...


John

On Thu, 2011-01-27 at 19:19 +0800, Zhengpeng Hou wrote:
> Package: rabbitmq-server
> Version: 2.2.0-1
> Severity: normal
> 
> --disabled-login should be passed to adduser in postinst. 
> 
> -- System Information:
> Debian Release: squeeze/sid
>   APT prefers natty-updates
>   APT policy: (500, 'natty-updates'), (500, 'natty-security'), (500, 'natty')
> Architecture: amd64 (x86_64)
> 
> Kernel: Linux 2.6.37-12-generic (SMP w/2 CPU cores)
> Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
> Shell: /bin/sh linked to /bin/dash
> 
> Versions of packages rabbitmq-server depends on:
> ii  adduser           3.112+nmu1ubuntu4      add and remove users and groups
> ii  erlang-base       1:13.b.3-dfsg-2ubuntu3 Erlang/OTP virtual machine and 
> bas
> ii  erlang-inets      1:13.b.3-dfsg-2ubuntu3 Erlang/OTP Internet clients and 
> se
> ii  erlang-mnesia     1:13.b.3-dfsg-2ubuntu3 Erlang/OTP distributed 
> relational/
> ii  erlang-os-mon     1:13.b.3-dfsg-2ubuntu3 Erlang/OTP operating system 
> monito
> ii  erlang-ssl        1:13.b.3-dfsg-2ubuntu3 Erlang/OTP implementation of SSL
> ii  logrotate         3.7.8-6ubuntu1         Log rotation utility
> 
> rabbitmq-server recommends no packages.
> 
> rabbitmq-server suggests no packages.
> 
> -- no debconf information
> 
> 





-- 
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]

Reply via email to