You have been subscribed to a public bug by Marc Deslauriers (mdeslaur):
Binary package hint: postgresql-common
apt-get (and in similar fashion aptitude/dpkg/synaptic) fail to fallback
properly when PAM denies to add a user.
In my company, we have a setup where each user signed in through
kerberos (winbind). This makes it impossible to add users using adduser
on ad hoc basis. It would be proper to let the administrator select what
user (service user) should be used or to give the administrator a chance
to add this user using the proper tools (in our case, Active Directory).
The following is a snippet of what goes wrong:
chfn: PAM authentication failed
adduser: `/usr/bin/chfn -f PostgreSQL administrator postgres' returned error
code 1. Exiting.
This has occured in similar fashion for Apache 2.
I would have expected a prompt or anything to supply the proper user to
use in any case when adduser fails.
As adduser fails, it might also cause security vulnerabilities if there
is no further action undertaken by the post-processing (such as Apache
reverting to use the root user, which in production environments is
improper).
** Affects: postgresql-common (Ubuntu)
Importance: Undecided
Status: New
--
apt-get install fails post-processing adduser when PAM is configured to use
kerberos authentication
https://bugs.launchpad.net/bugs/663190
You received this bug notification because you are a member of Ubuntu Bugs,
which is a direct subscriber.
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
