From mboxrd@z Thu Jan 1 00:00:00 1970 From: "pelzflorian (Florian Pelz)" Subject: bug#35996: User account password got locked when booting old generation Date: Wed, 29 May 2019 22:45:17 +0200 Message-ID: <20190529204517.mqn5xrw23xib4i3u@pelzflorian.localdomain> Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Return-path: Received: from eggs.gnu.org ([209.51.188.92]:55726) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1hW5SV-00080L-Q7 for bug-guix@gnu.org; Wed, 29 May 2019 16:46:10 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1hW5SU-0000HQ-PL for bug-guix@gnu.org; Wed, 29 May 2019 16:46:03 -0400 Received: from debbugs.gnu.org ([209.51.188.43]:46491) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1hW5SU-0000HE-Ir for bug-guix@gnu.org; Wed, 29 May 2019 16:46:02 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1hW5SU-0002Dz-Fm for bug-guix@gnu.org; Wed, 29 May 2019 16:46:02 -0400 Sender: "Debbugs-submit" Resent-Message-ID: Received: from eggs.gnu.org ([209.51.188.92]:55651) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1hW5Rq-0007mn-Fb for bug-guix@gnu.org; Wed, 29 May 2019 16:45:23 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1hW5Rp-0008N3-Bb for bug-guix@gnu.org; Wed, 29 May 2019 16:45:22 -0400 Received: from pelzflorian.de ([5.45.111.108]:41898 helo=mail.pelzflorian.de) by eggs.gnu.org with esmtps (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1hW5Ro-0008Lt-ND for bug-guix@gnu.org; Wed, 29 May 2019 16:45:21 -0400 Received: from pelzflorian.localdomain (unknown [5.45.111.108]) by mail.pelzflorian.de (Postfix) with ESMTPSA id E1109360077 for ; Wed, 29 May 2019 22:45:17 +0200 (CEST) Content-Disposition: inline List-Id: Bug reports for GNU Guix List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-guix-bounces+gcggb-bug-guix=m.gmane.org@gnu.org Sender: "bug-Guix" To: 35996@debbugs.gnu.org After I reconfigured to a broken, unbootable generation and then rebooted to an old working generation, I found my user account password was locked. This was my /etc/shadow: root::18045:::::: florian:!:18045:::::: nobody:!:18045:::::: guixbuilder01:!:18045:::::: guixbuilder02:!:18045:::::: guixbuilder03:!:18045:::::: guixbuilder04:!:18045:::::: guixbuilder05:!:18045:::::: guixbuilder06:!:18045:::::: guixbuilder07:!:18045:::::: guixbuilder08:!:18045:::::: guixbuilder09:!:18045:::::: guixbuilder10:!:18045:::::: ntpd:!:18045:::::: messagebus:!:18045:::::: polkitd:!:18045:::::: geoclue:!:18045:::::: colord:!:18045:::::: avahi:!:18045:::::: gdm:!:18045:::::: httpd:!:18045:::::: Logging in as root (root had an empty password before as well) and running `passwd florian` fixed it, and I *cannot* reproduce the bug anymore by booting the broken generation again, i.e. my password remains set now. I presume it is not possible to lock a password by typing the wrong password too often on the virtual console? If you think this is not enough material to work on, feel free to close this bug, but there seems to be some misbehavior somewhere in Guix=E2=80=99 password management. (The reason for the new generation=E2=80=99s brokenness seems unrelated; = it could not boot after I tried adding syslogd to the requirements of udev-shepherd-service.) Regards, Florian