[Debconf-devel] Bug#868304: Impossible to login with user when network installing with libpam-krb5
Mimiko
vbvbrj at gmail.com
Fri Jul 14 11:23:11 UTC 2017
Package: debconf
Version: 1.5.61
Severity: normal
Tags: d-i
When installing and preseeding Debian Stretch with following:
user-setup-udeb passwd/shadow boolean true
d-i passwd/root-login boolean false
d-i pkgsel/include string winbind krb5-user libpam-krb5 libnss-winbind libpam-winbind
And specify the local user with sudo privileges, after install can not login in with specified user during installation.
In /etc/passwd user is present. But password is not set correctly. The problem lies in that at setting user and password step, installer tries to set
password for the user using krb5 like user is in domain, and is failing.
In result, despite the user exists locally and have sudo privileges, the password stored in system is not the one inserted at installation. And the
root is disabled.
This problem is related with the line present in /etc/pam.d/common-*:
.. pam_krb5.so minimum_uid=1000
If minimum_uid could be specified at preseed time to something 10000 then local users uids will not interfer and setting password for local user will
succeed.
More information about the Debconf-devel
mailing list