[Pkg-shadow-devel] Bug#325558: login: newgrp quite broken?

[Ian Zimmerman]

Package: login
Version: 1:4.0.3-31sarge5
Severity: normal

Thus "man newgrp":

The user will be prompted for a password if she do not have a password and  the
group does, or if the user is not listed as a member and the group has a password. The user will be denied
access if the group password is empty and the user is not listed as a member.

But:

itz at unicorn:~$ groups
itz cdrom floppy audio src games tex
itz at unicorn:~$ grep '^src:' /etc/group
src::40:itz
itz at unicorn:~$ sudo grep '^src:' /etc/gshadow
src:::
itz at unicorn:~$ newgrp src
Password: <I type my own here because I don't know what the h*l else I should do>
Sorry.

Moreover:

itz at unicorn:~$ sudo gpasswd src
Changing the password for group src
New Password: 
Re-enter new password: 
itz at unicorn:~$ newgrp src
Password: 

Also wrong, according to the manpage.


-- System Information:
Debian Release: 3.1
Architecture: i386 (i686)
Kernel: Linux 2.6.8-12custom3
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)

Versions of packages login depends on:
ii  libc6                       2.3.2.ds1-22 GNU C Library: Shared libraries an
ii  libpam-modules              0.76-22      Pluggable Authentication Modules f
ii  libpam-runtime              0.76-22      Runtime support for the PAM librar
ii  libpam0g                    0.76-22      Pluggable Authentication Modules l

-- no debconf information