[Pkg-shadow-devel] Bug#316219: More details about this bug report

Christian Perrier Christian Perrier <bubulle@debian.org>, 316219@bugs.debian.org
Thu, 30 Jun 2005 09:21:18 +0200


>From a discussion I had with Bastian Blank (waldi) on IRC:

08:42  * bubulle wonders why the hell someone is sayign that shadow passwords are not enabled on
          fresh installed sarge systems
08:47 < waldi> bubulle: check the passwd scripts, it never enables them
08:57 < bubulle> waldi: ? What about the STATE 2 in the state machine?
08:57 < waldi> bubulle: which is only reached from a reconfigure
08:58 < waldi> if [ "$1" != reconfigure ]; then
08:58 < waldi>         exit 0
08:58 < waldi> fi
08:59 < bubulle> hmmm, how is the root password set, then?
08:59 < waldi> bubulle: base-config calls dpkg-reconfigure base-passwd
08:59  * bubulle checks how base-config interacts with passwd
08:59 < waldi> s/base-//
08:59 < bubulle> yeah...so shadow passwords *are* activated..:-)
09:00 < waldi> no
09:01 < bubulle> ??
09:02 < waldi> base-config is called if someone used d-i, not if someone decides to use debootstrap
               directly or just don't install the flagged as optional base-config
09:05 < waldi> okay, base-config currently don't work in noninteractive mode, need to write a bug
09:06 < bubulle> sure, but in the reported case, the user was using D-I. However, he just mentioned
                 that he was actually *skipping* base-config voluntarily, which explains why he
                 ended up with no shadow passwords.
09:07 < bubulle> waldi: and, yes, we have to deal with your #316219 BR
09:08 < waldi> bubulle: proposal: just call shadowconfig on in postinst if called with install but
               not upgrade
09:08 < bubulle> I probably have to move the shadow passwords question out of the state machine
09:09 < bubulle> yes, kinda like that
09:09 < waldi> it won't hurt if someone decides to answer the question with no later
09:10 < waldi> anyway, debootstrap won't ever reach this code, as it only does upgrades
09:10 < bubulle> I'm not very familiar with debootstrap so feel free to propose us a patch, it will
                 be deeply appreciated
09:11 < bubulle> ...unless another shadow maintainer actually knows better about this than me of
                 course
09:14 < waldi> so I need to build my own archive to test that
09:15 < bubulle> waldi: OK for me to paste this in the bug log for 316219?
09:15 < waldi> yep

So, we probably need to follow Bastian's suggestion and at least make
sure that shadowconfig is run in postinst. After all, it doesn't
really hurt to run it during upgrades at first look.

--