From mboxrd@z Thu Jan 1 00:00:00 1970 From: Ludovic =?UTF-8?Q?Court=C3=A8s?= Subject: bug#35996: User account password got locked when booting old generation Date: Mon, 03 Jun 2019 15:22:51 +0200 Message-ID: <87tvd6erbo.fsf@gnu.org> References: <20190529204517.mqn5xrw23xib4i3u@pelzflorian.localdomain> <877ea6l1on.fsf@gnu.org> <20190601055238.jkhefpupavz7aipi@pelzflorian.localdomain> <20190601145834.f4wgm4oqmdyej7n5@pelzflorian.localdomain> <87r28dc7gw.fsf@gnu.org> <20190602070545.xp2pqlnzsthpjtbw@pelzflorian.localdomain> <87sgss9vj7.fsf@gnu.org> <20190602102122.bzapwt36vg32nmwq@pelzflorian.localdomain> <87o93g9dv5.fsf@gnu.org> <20190603060301.2nu2zqi5j3v3j5ki@pelzflorian.localdomain> Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Return-path: Received: from eggs.gnu.org ([209.51.188.92]:47834) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1hXmwc-0000Uf-DE for bug-guix@gnu.org; Mon, 03 Jun 2019 09:24:11 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1hXmwW-0005kd-BB for bug-guix@gnu.org; Mon, 03 Jun 2019 09:24:06 -0400 Received: from debbugs.gnu.org ([209.51.188.43]:56562) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1hXmwU-0005hS-KV for bug-guix@gnu.org; Mon, 03 Jun 2019 09:24:02 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1hXmwU-0002WQ-E3 for bug-guix@gnu.org; Mon, 03 Jun 2019 09:24:02 -0400 Sender: "Debbugs-submit" Resent-Message-ID: In-Reply-To: <20190603060301.2nu2zqi5j3v3j5ki@pelzflorian.localdomain> (pelzflorian@pelzflorian.de's message of "Mon, 3 Jun 2019 08:03:01 +0200") List-Id: Bug reports for GNU Guix List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-guix-bounces+gcggb-bug-guix=m.gmane.org@gnu.org Sender: "bug-Guix" To: "pelzflorian (Florian Pelz)" Cc: 35996@debbugs.gnu.org Hi Florian, "pelzflorian (Florian Pelz)" skribis: > After I booted to a Guix install USB, chrooted as described on the > Arch wiki and started a Guix daemon, I could reconfigure as before. > There was no need to fiddle with grub-install. > > After multiple reconfigures, it happened again, my /etc/shadow has ! > again in the password field. My recently changed root password became > empty as well, like 35902. I did not even run sudo concurrently. The > password just got locked. What were the differences between your config files when you reconfigured? Did the config files describe the exact same set of user accounts? Did the user accounts in the config files differ in any way? Were the user accounts altered in any way in between reconfigures (=E2=80=98passwd=E2=80=99, =E2=80=98usermod=E2=80=99, GNOME, etc.)? Looking at =E2=80=98user+group-databases=E2=80=99 in (gnu build accounts), = which takes a list of and a list of to produce /etc/{passwd,shadow,group}, the only way this could happen is if /etc/shadow does not exist at the time of reconfigure. In that case, =E2=80=98user+group-databases=E2=80=99 assumes we=E2=80=99re = starting anew, so it creates /etc/shadow with the initial passwords specified in the OS config. At that point, the other passwords are lost forever. Does Shadow or gnome-control-center or something remove /etc/shadow altogether while it=E2=80=99s accessing it? At the very least, adding locking like you suggested should avoid this class of problems; I=E2=80=99ll look into that. > From 1eb7699d5036062993a080393bfb4a46d2dc1bea Mon Sep 17 00:00:00 2001 > From: Florian Pelz > Date: Mon, 3 Jun 2019 07:19:20 +0200 > Subject: [PATCH 1/2] =3D?UTF-8?q?Add=3D20cracklib=3DE2=3D80=3D99s=3D20pas= sword=3D20dicti?=3D > =3D?UTF-8?q?onary=3D20to=3D20cracklib=3DE2=3D80=3D99s=3D20default=3D20ou= tput.?=3D > MIME-Version: 1.0 > Content-Type: text/plain; charset=3DUTF-8 > Content-Transfer-Encoding: 8bit > > * gnu/packages/password-utils.scm (cracklib): Use `make dict`. [...] > From c7c016adc34c591febd0d3630f32dbecdd20ad7c Mon Sep 17 00:00:00 2001 > From: Florian Pelz > Date: Sun, 2 Jun 2019 20:01:23 +0200 > Subject: [PATCH 2/2] Make gnome-control-center find passwd binary. > > * gnu/packages/gnome.scm (gnome-control-center): Substitute correct path = to > passwd. Great, applied both. Thank you! Ludo=E2=80=99.