[Pkg-shadow-devel] Bug#1004472: groupmem: make authentification clear and check interaction with PAM

Fri Jan 28 10:29:49 GMT 2022

Package: passwd
Version: 1:4.8.1-1
Severity: normal

Dear Maintainer,

   * What led up to the situation?

Checks made for translation of man 8 groupmems 

   * What exactly did you do (or not do) that was effective (or
     ineffective)?

Try to invoke groupmems as user and as systemadministrator

   * What was the outcome of this action?

groupmems asked in both cases for authentification by a password, but does not specify which password is expected. There are three possibilies
a) root password from root (however, this does not make much sense)
b) user password for group-owning user (however, this does not make much sense)  
c) the group's password

In all cases, I got a PAM authentification failure

   * What outcome did you expect instead?

A snippet from the logfile is attached

Best regards
Markus

-- System Information:
Debian Release: 11.1
  APT prefers stable-security
  APT policy: (500, 'stable-security'), (500, 'stable')
Architecture: i386 (i686)

Kernel: Linux 5.10.0-9-686-pae (SMP w/1 CPU thread)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages passwd depends on:
ii  libaudit1       1:3.0-2
ii  libc6           2.32-4
ii  libcrypt1       1:4.4.18-4
ii  libpam-modules  1.4.0-9+deb11u1
ii  libpam0g        1.4.0-9+deb11u1
ii  libselinux1     3.1-3
ii  libsemanage1    3.1-1+b2

passwd recommends no packages.

passwd suggests no packages.

-- Configuration Files:
/etc/default/useradd [Errno 13] Keine Berechtigung: '/etc/default/useradd'

-- no debconf information
-------------- next part --------------
Jan 28 08:42:56 lune sshd[423]: Server listening on 0.0.0.0 port 22.
Jan 28 08:42:57 lune sshd[423]: Server listening on :: port 22.
Jan 28 08:43:10 lune systemd-logind[376]: Watching system buttons on /dev/input/event4 (Power Button)
Jan 28 08:43:10 lune systemd-logind[376]: Watching system buttons on /dev/input/event2 (Power Button)
Jan 28 08:43:10 lune systemd-logind[376]: Watching system buttons on /dev/input/event3 (Sleep Button)
Jan 28 08:43:11 lune systemd-logind[376]: Watching system buttons on /dev/input/event0 (AT Translated Set 2 keyboard)
Jan 28 08:43:11 lune systemd-logind[376]: New seat seat0.
Jan 28 08:44:34 lune xdm[480]: pam_unix(xdm:session): session opened for user hiereth(uid=501) by (uid=0)
Jan 28 08:44:34 lune systemd-logind[376]: New session 1 of user hiereth.
Jan 28 08:44:35 lune systemd: pam_unix(systemd-user:session): session opened for user hiereth(uid=501) by (uid=0)
Jan 28 09:09:01 lune CRON[1274]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jan 28 09:09:02 lune CRON[1274]: pam_unix(cron:session): session closed for user root
Jan 28 09:17:02 lune CRON[1346]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jan 28 09:17:02 lune CRON[1346]: pam_unix(cron:session): session closed for user root
Jan 28 09:34:56 lune login[1406]: pam_unix(login:session): session opened for user tester2(uid=1001) by LOGIN(uid=0)
Jan 28 09:34:56 lune systemd-logind[376]: New session 5 of user tester2.
Jan 28 09:34:57 lune systemd: pam_unix(systemd-user:session): session opened for user tester2(uid=1001) by (uid=0)
Jan 28 09:35:08 lune login[1406]: pam_unix(login:session): session closed for user tester2
Jan 28 09:35:08 lune systemd-logind[376]: Session 5 logged out. Waiting for processes to exit.
Jan 28 09:35:08 lune systemd-logind[376]: Removed session 5.
Jan 28 09:35:18 lune systemd: pam_unix(systemd-user:session): session closed for user tester2
Jan 28 09:35:24 lune login[384]: pam_unix(login:session): session opened for user root(uid=0) by LOGIN(uid=0)
Jan 28 09:35:24 lune systemd-logind[376]: New session 7 of user root.
Jan 28 09:35:24 lune systemd: pam_unix(systemd-user:session): session opened for user root(uid=0) by (uid=0)
Jan 28 09:35:25 lune login[1475]: ROOT LOGIN  on '/dev/tty1'
Jan 28 09:36:58 lune usermod[1489]: change user 'tester2' shell from '' to '/bin/bash'
Jan 28 09:38:48 lune agetty[1447]: tty2: invalid character 0x1b in login name
Jan 28 09:39:01 lune CRON[1515]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jan 28 09:39:01 lune CRON[1515]: pam_unix(cron:session): session closed for user root
Jan 28 09:39:09 lune login[1513]: pam_unix(login:session): session opened for user tester2(uid=1001) by LOGIN(uid=0)
Jan 28 09:39:09 lune systemd-logind[376]: New session 10 of user tester2.
Jan 28 09:39:09 lune systemd: pam_unix(systemd-user:session): session opened for user tester2(uid=1001) by (uid=0)
Jan 28 09:45:40 lune groupmems[1647]: pam_unix(groupmems:auth): authentication failure; logname=root uid=0 euid=0 tty= ruser= rhost=  user=root
Jan 28 09:45:41 lune groupmems[1647]: Authentication failure
Jan 28 09:46:04 lune groupmems[1651]: pam_unix(groupmems:auth): authentication failure; logname=root uid=0 euid=0 tty= ruser= rhost=  user=root
Jan 28 09:46:05 lune groupmems[1651]: Authentication failure
Jan 28 09:51:03 lune gpasswd[1666]: password of group tester2 changed by root
Jan 28 09:52:45 lune unix_chkpwd[1683]: password check failed for user (tester2)
Jan 28 09:52:45 lune groupmems[1680]: pam_unix(groupmems:auth): authentication failure; logname=tester2 uid=1001 euid=1001 tty= ruser= rhost=  user=tester2
Jan 28 09:52:47 lune groupmems[1680]: Authentication failure
Jan 28 09:53:47 lune unix_chkpwd[1688]: password check failed for user (tester2)
Jan 28 09:53:47 lune groupmems[1686]: pam_unix(groupmems:auth): authentication failure; logname=tester2 uid=1001 euid=1001 tty= ruser= rhost=  user=tester2
Jan 28 09:53:49 lune groupmems[1686]: Authentication failure
Jan 28 10:09:01 lune CRON[1888]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jan 28 10:09:01 lune CRON[1888]: pam_unix(cron:session): session closed for user root
Jan 28 10:17:01 lune CRON[1959]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jan 28 10:17:01 lune CRON[1959]: pam_unix(cron:session): session closed for user root
Jan 28 10:39:01 lune CRON[2053]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jan 28 10:39:01 lune CRON[2053]: pam_unix(cron:session): session closed for user root