[Bug 488158] Re: users-admin should leave adduser handle main group creation
This bug was fixed in the package gnome-system-tools - 2.29.3-0ubuntu1 --- gnome-system-tools (2.29.3-0ubuntu1) lucid; urgency=low * New upstream release (LP: #506365) - Move to new System Tools Backends protocol (new liboobs API). We now only commit changes to one user at a time, reducing the risk for dangerous bugs. - Include default profiles configuration file (user-profiles.conf). Distributors should modify it to suit their needs and send them back for inclusion. - When creating an user, don't force UID, main group, home directory and shell: these parameters are now handled (better) by the platform tools (LP: #488158, LP: #313990) - Allow removing home directory when deleting an user (LP: #426125). - Don't allow deleting the last administrator account, and warn when the user is losing its own admin rights. Same for active users (LP: #25947, LP: #349453) - Don't allow creating a group with an existing GID (LP: #491434) - Use UID and GID ranges defined by liboobs, depending on the platform's abilities. - Clear suggested login entry when Real name is emptied in the new user dialog. - Change GConf showall option to apply only on users. System groups are always shown, since they are the most interesting ones. - Various UI and string improvements. - Change password for current user by running 'passwd', to avoid breaking keyrings and encrypted dirs - Ask for PolicyKit authentication when it most makes sense, i.e. when showing dialogs - Option to set encrypted home directories when creating users (on platforms that support it) (LP: #302870) - When editing one group, only commit changes to that group - When changing Real name, update it in the users list (LP: #498970) - Select current user on start, and the first one after selected user has been deleted - Don't force updating configuration twice on start * Also fixes LP: #344182, LP: #208057, LP: #188757, LP: #372695, LP: #99276, LP: #160862 * debian/control: - Bump liboobs-dev build-dep to 2.29.3 * debian/gnome-system-tools.install: - Don't install debian/profile - Install upstream user-profiles.conf instead * Delete debian/profiles * Refreshed patches: - 25_sambashare_group_definition.patch - 90_relibtoolize.patch * Dropped debian/patches/85_user_gnome_about_me_for_password.patch: - The change is obsolete in the new version * debian/patches/82_gst-packages-time-admin.patch: - Updated to remove superfluous UI file changes, causing focus issues in the users-admin password change dialog. Thanks to Will for spotting this (LP: #501976) -- Chris Coulson chrisccoul...@ubuntu.com Fri, 05 Feb 2010 15:30:10 + ** Changed in: gnome-system-tools (Ubuntu) Status: Fix Committed = Fix Released -- users-admin should leave adduser handle main group creation https://bugs.launchpad.net/bugs/488158 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is subscribed to gnome-system-tools in ubuntu. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 488158] Re: users-admin should leave adduser handle main group creation
** Changed in: gnome-system-tools (Ubuntu) Status: Triaged = Fix Committed -- users-admin should leave adduser handle main group creation https://bugs.launchpad.net/bugs/488158 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is subscribed to gnome-system-tools in ubuntu. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 488158] Re: users-admin should leave adduser handle main group creation
** Branch linked: lp:~ubuntu-desktop/gnome-system-tools/ubuntu -- users-admin should leave adduser handle main group creation https://bugs.launchpad.net/bugs/488158 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is subscribed to gnome-system-tools in ubuntu. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 488158] Re: users-admin should leave adduser handle main group creation
Good choice I think. Cutting down the settings forced with g-s-t GUI profiles is probably also a good measure for supporting the adduser profiles (or any other system wide profiles). -- users-admin should leave adduser handle main group creation https://bugs.launchpad.net/bugs/488158 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is subscribed to gnome-system-tools in ubuntu. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 488158] Re: users-admin should leave adduser handle main group creation
Hmm, seems like adduser wants to ensure UID == UPG-GID? Maybe g-s-t could offer to choose the next possible ID available, or optionally override the GID and possibly mess up the system? -- users-admin should leave adduser handle main group creation https://bugs.launchpad.net/bugs/488158 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is subscribed to gnome-system-tools in ubuntu. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 488158] Re: users-admin should leave adduser handle main group creation
Yeah, I thought first we might also choose a UID which would also be a free GID. Anyway, that's fixed another way now: with the default profiles configuration file (/etc/gnome-system-tools/user- profiles.conf), we only force group memberships. UID, Home prefix and shells are now determined by adduser, since we didn't really care. So that is fixed with 2.29.2, which will be uploaded soon in Lucid. adduser task is Invalid. ** Changed in: gst Status: Confirmed = Fix Released ** Changed in: adduser (Ubuntu) Status: Triaged = Invalid -- users-admin should leave adduser handle main group creation https://bugs.launchpad.net/bugs/488158 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is subscribed to gnome-system-tools in ubuntu. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 488158] Re: users-admin should leave adduser handle main group creation
Good news, I've just finished a future patch that allows us to stop creating the main group ourselves. When creating an user, the backends can now omit the --gid option, and we let adduser (and equivalents) do the work. This is simpler for everyone. Should be in the next release. Now I need to get a bug in adduser fixed, because if you specify --uid without --gid, and adduser absolutely wants to use the UID as GID for the new main group, which can fail if the free UID we chose was used by a group (this happens on systems where things are a little messed up, but that's not rare). Since we still have to specify the UID (for now at least), adduser should be patched to choose another GID when needed. Not too hard, I guess. ** Also affects: adduser (Ubuntu) Importance: Undecided Status: New ** Changed in: adduser (Ubuntu) Status: New = Triaged ** Changed in: adduser (Ubuntu) Importance: Undecided = Low ** Also affects: gst Importance: Undecided Status: New ** Changed in: gst Status: New = Confirmed -- users-admin should leave adduser handle main group creation https://bugs.launchpad.net/bugs/488158 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is subscribed to gnome-system-tools in ubuntu. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 488158] Re: users-admin should leave adduser handle main group creation
Sure, that would make sense. But that's not really high priority to me, as most people won't tweak the group settings without knowing how this works. Maybe one day... -- users-admin should leave adduser handle main group creation https://bugs.launchpad.net/bugs/488158 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is subscribed to gnome-system-tools in ubuntu. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 488158] Re: users-admin should leave adduser handle main group creation
Just came across this answer. http://lists.alioth.debian.org/pipermail/adduser-devel/2008-February/003161.html -- users-admin should leave adduser handle main group creation https://bugs.launchpad.net/bugs/488158 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is subscribed to gnome-system-tools in ubuntu. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 488158] Re: users-admin should leave adduser handle main group creation
Hi, what a nice coincidence. :) Thank you for your feedback. I have now updated the wiki to match the adduser behaviour as well. I've seen now, that only useradd/groupadd is part of the debian passwd package, but adduser uses it. (But still, adduser could be smarter and remove the group if the user was the only member of it.) Imagine the group of santaclauses. Around the end off the year different people get to be members therin. If the manually created group would get deleted with the last santa claus resigning in january, next year a newly created group would probably not get the same GID . Files provided in the /home/group/santaclauses would not be usable by the new group. I don't know the problems GID != UID UPGs could make other then not being easily recognizable by humans, when seeing the numerical IDs in .tar files or mounts on other machines. users-admin has its own algorithm to find a good UID/GID ... If that really matters, I could remove this behavior so that we ask adduser to choose [the UID/GIDs]. This is generally a good idea, but may not be very high priority for me if it does not hurt. Oh, well, that kind of behaviour however can actually hurt heavily, yes. (another tool has hit me with that) Especially in networked evironments you assign special UID/GID ranges to use (and configure the useradd/adduser hooks to take care of it). Now if me or some other admin of the institution switches the GUI tool and it starts choosing IDs of its own liking the tool can cause quite adverse effects. So if you can, please do not default to override the numerical IDs assigned by the system. In all I am happy to hear users-admin is generally using the adduser tool, and it's only some avoidable overrides that are troublesome. BTW: (for forwarding to the debian bug you linked) the default from /etc/login.defs: # This enables userdel to remove user groups if no members exist. # # Other former uses of this variable such as setting the umask when # user==primary group are not used in PAM environments, thus in Debian # USERGROUPS_ENAB yes In this case userdel should probaly also alter the Warning: group X is now empty. message to According to USERGROUPS_ENAB yes, the empty private user group has been deleted as well. or somthing. -- users-admin should leave adduser handle main group creation https://bugs.launchpad.net/bugs/488158 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is subscribed to gnome-system-tools in ubuntu. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 488158] Re: users-admin should leave adduser handle main group creation
Actually, now that I think of it, we can't avoid forcing the UID because we implement user profiles in users-admin. Those allow the distribution/admin to present users with typical account types, which set sensible default values for home dir, shell, groups membership (esp. admin), and UID. It's kind of silly we implement this on the GUI side, but as we can't be sure the distribution supports this kind of feature (and none does ATM), moving this responsibility to adduser would require modifying deeply the protocol, and add fallback support for systems that don't support this. So it's not going to happen soon, given that adduser would have to support that first. Administrators using users-admin should ensure the profiles are correctly defined, or not use the tool at all. All I can do for now is have a look at the profiles handling code so that when no profiles are set, we don't specify any UID, and the backends leave adduser decide for us. Not very hard, but our protocol does not support it ATM. -- users-admin should leave adduser handle main group creation https://bugs.launchpad.net/bugs/488158 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is subscribed to gnome-system-tools in ubuntu. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 488158] Re: users-admin should leave adduser handle main group creation
I'll use this bug to track the issue of not adding users to their main groups. I should be able to fix this soon. ** Changed in: gnome-system-tools (Ubuntu) Status: Confirmed = Triaged -- users-admin should leave adduser handle main group creation https://bugs.launchpad.net/bugs/488158 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is subscribed to gnome-system-tools in ubuntu. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 488158] Re: users-admin should leave adduser handle main group creation
All right, has been a pleasure. -- users-admin should leave adduser handle main group creation https://bugs.launchpad.net/bugs/488158 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is subscribed to gnome-system-tools in ubuntu. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 488158] Re: users-admin should leave adduser handle main group creation
From viewing users I created with adduser I just noticed that in the g-s-t edit group window the users name is of course not checked when viewing any UPG created with adduser. It may be nice to remove that user from the list and have some sort of indicator that a group is a (possibly private) primary group of user x instead, just as an affirmation that everything is ok. Another UI thing is that when changing the primary group of user, the g-s-t user may want the (edited) user to stay a member of the prior group. (you probably already had that in mind) -- users-admin should leave adduser handle main group creation https://bugs.launchpad.net/bugs/488158 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is subscribed to gnome-system-tools in ubuntu. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 488158] Re: users-admin should leave adduser handle main group creation
s / remove that user from the list / remove that checkbox from the list -- users-admin should leave adduser handle main group creation https://bugs.launchpad.net/bugs/488158 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is subscribed to gnome-system-tools in ubuntu. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
