[Pkg-shadow-devel] Bug#492307: passwd -l regression from #389183

[Thilo Six]

Subject: passwd -l regression from #389183
Package: passwd
Version: 1:4.1.1-2
Severity: important

*** Please type your report below this line ***

Hello

in http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=389183 a patch to
passwd had been introduced, which sets the expiry flag to locked
accounts.

Now:

lenny:~# whoami
root
lenny:~# head -1 /etc/shadow
root:$1$PfGgqPXx$EEhX5V1pTYd1hbr8j6wl.1:14085:0:99999:7:::
lenny:~# LANG=C passwd -l root
Password changed.
lenny:~# head -1 /etc/shadow
root:!$1$dnJSdUJb$kE6tQO.fAeSUl2hoOTPWQ1:14085:0:99999:7::1:
lenny:~# LANG=C passwd
Enter new UNIX password:
Retype new UNIX password:
passwd: password updated successfully
lenny:~# head -1 /etc/shadow
root:$1$dnJSdUJb$kE6tQO.fAeSUl2hoOTPWQ1:14085:0:99999:7::1:

as you can see the flag isn't removed again when the account is reopend
later again.

second there are users who have problems when installing in expert mode
and set the "install without root" option:
http://thread.gmane.org/gmane.linux.debian.user/330437

with cronjobs and therelike.

Imho this is a regression in passwd.

Instead to entangle the -l and the -e into one option that doesn't work
for all it maybe would be better to document the background of #389183 in
the manpage (maybe nearby the -l option) and revert that change.

-- System Information:
Debian Release: lenny/sid
  APT prefers testing-proposed-updates
  APT policy: (500, 'testing-proposed-updates'), (500, 'testing')
Architecture: i386 (i686)

Kernel: Linux 2.6.25-2-686 (SMP w/1 CPU core)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages passwd depends on:
ii  debianutils          2.30       Miscellaneous utilities specific t
ii  libc6                2.7-10     GNU C Library: Shared libraries
ii  libpam-modules       0.99.7.1-6 Pluggable Authentication Modules f
ii  libpam0g             0.99.7.1-6 Pluggable Authentication Modules l
ii  libselinux1          2.0.59-1   SELinux shared libraries

passwd recommends no packages.

passwd suggests no packages.

-- no debconf information

-- 
bye Thilo

key: 0x4A411E09