Your message dated Wed, 8 Jan 2025 14:03:04 +0100
with message-id <[email protected]>
and subject line Re: Bug#531955: More General Lack of NSS Support
has caused the Debian Bug report #531955,
regarding useradd creates local-only users on nis server
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
531955: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=531955
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: passwd
Version: 1:4.1.1-6
If I try to create a new user account using a command
line like
useradd -c "John User" -b /home -m -g users john
then john becomes a local-only user, even though the host
to run useradd is the master NIS server. The new /etc/passwd
looks like this:
root:x:0:0:root:/root:/bin/bash
daemon:x:1:1:daemon:/usr/sbin:/bin/sh
bin:x:2:2:bin:/bin:/bin/sh
sys:x:3:3:sys:/dev:/bin/sh
:
:
nagios:x:108:112::/var/log/nagios:/bin/false
john:x:55004:100:John User:/home/john:/bin/bash
+admin1::::::
+admin2::::::
+:*:::::/etc/NoShell
guest:x:501:65534:Guest Account:/home/guest:/bin/bash
admin1:x:502:0:Admin1:/home/admin1:/bin/bash
admin2:x:503:0:Admin2:/home/admin2:/bin/bash
user1:x:1001:100:Erich User:/home/erich:/bin/bash
:
:
usern:x:1111:100:Charly User:/home/charly:/bin/bash
The new user "john" is added _before_ the first NIS compat entry,
instead of being appended to passwd. /var/yp/Makefile ignores
anything before the compat entries, i.e. John got a local account
on our NIS server only. This is not useful.
Regards
Harri
--- End Message ---
--- Begin Message ---
On Fri, Feb 19, 2010 at 12:25:14AM -0800, Elliott Mitchell wrote:
> I don't believe this is attributable to NIS, but a more generalized
> problem (and I would expect the general problem to effect current
> versions of the passwd package too).
>
> I'm running into a similar sort of difficulty here, except the package
> I've got interacting in a bad way is libnss-db. Mainly, `useradd` doesn't
> get the user/group DBs rebuilt when adding users/groups.
>
> This will almost certainly be a problem for any of the NSS modules that
> change where users/groups are stored or their formats. Looking at the
> list of packages, this will almost certainly effect anyone who has one
> or more of: libnss-db, libnss-extrausers, libnss-ldap, libnss-ldapd,
> libnss-mysql, libnss-mysql-bg, libnss-pgsql2, or libnss3-1d packages
> installed.
>
> I'm unsure whether this is a flaw in `useradd`; or whether this is a
> fault with libpam/libnss for not defining APIs to modify entries, in
> addition to retrieving them.
I agree that this is not a bug in useradd/userdel/..., which are
tools to manage the "local password database", which were
specifically means /etc/{passwd,shadow,group,gshadow}.
Chris
--- End Message ---
_______________________________________________
Pkg-shadow-devel mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/pkg-shadow-devel