[Debconf-devel] Bug#868304: Impossible to login with user when network installing with libpam-krb5

Mimiko vbvbrj at gmail.com
Fri Jul 14 11:23:11 UTC 2017


Package: debconf
Version: 1.5.61
Severity: normal
Tags: d-i

When installing and preseeding Debian Stretch with following:

user-setup-udeb passwd/shadow boolean true
d-i passwd/root-login  boolean false
d-i pkgsel/include string winbind krb5-user libpam-krb5 libnss-winbind libpam-winbind

And specify the local user with sudo privileges, after install can not login in with specified user during installation.

In /etc/passwd user is present. But password is not set correctly. The problem lies in that at setting user and password step, installer tries to set 
password for the user using krb5 like user is in domain, and is failing.

In result, despite the user exists locally and have sudo privileges, the password stored in system is not the one inserted at installation. And the 
root is disabled.

This problem is related with the line present in /etc/pam.d/common-*:
.. pam_krb5.so minimum_uid=1000

If minimum_uid could be specified at preseed time to something 10000 then local users uids will not interfer and setting password for local user will 
succeed.



More information about the Debconf-devel mailing list