[Pkg-zfsonlinux-devel] Bug#1060460: reportbug: adduser prompts for current password when adding user, impossible to change passphrase

[наб]

Package: libpam-zfs
Version: 2.2.2-3
Severity: normal

Dear Maintainer,

Given
  # adduser testuser
  info: Adding user `testuser' ...
  info: Selecting UID/GID from range 1000 to 59999 ...
  info: Adding new group `testuser' (1001) ...
  info: Adding new user `testuser' (1001) with group `testuser (1001)' ...
  info: Creating home directory `/home/testuser' ...
  info: Copying files from `/etc/skel' ...
  Current password:

What does this mean? What am I supposed to write here?

If I respond with mismatched passwords then
  Current password: abc
  New password: def
  Retype new password: def
  passwd: Authentication token manipulation error
  passwd: password unchanged
  Try again? [y/N]

And if with the same then:
  adduser testuser
  info: Adding user `testuser' ...
  info: Selecting UID/GID from range 1000 to 59999 ...
  info: Adding new group `testuser' (1001) ...
  info: Adding new user `testuser' (1001) with group `testuser (1001)' ...
  info: Creating home directory `/home/testuser' ...
  info: Copying files from `/etc/skel' ...
  Current password: asd
  New password: asd
  Retype new password: asd
  The password has not been changed.
  New password: asd
  Retype new password: asd
  The password has not been changed.
  New password: asd
  Retype new password: asd
  The password has not been changed.
  passwd: Authentication token manipulation error
  passwd: password unchanged
  Try again? [y/N] 

And if I click through the rest, the user is disabled:
  $ getent passwd testuser
  testuser:x:1001:1001:test,test,test,test,test:/home/testuser:/bin/bash
  # getent shadow testuser
  testuser:!:19733:0:99999:7:::

If I then passwd testuser then
  Current password:
  New password:
  Retype new password:
  passwd: Authentication token manipulation error
  passwd: password unchanged
when running as root!

In the journal I see
  Jan 11 20:40:14 chrust sudo[10942]: nabijaczleweli : TTY=pts/0 ; PWD=/home/nabijaczleweli ; USER=root ; COMMAND=/usr/bin/passwd testuser
  Jan 11 20:40:14 chrust sudo[10942]: pam_unix(sudo:session): session opened for user root(uid=0)
  by nabijaczleweli(uid=1000)
  Jan 11 20:40:16 chrust passwd[10944]: pam_zfs_key(passwd:chauthtok): dataset chrust-zoot/home/testuser not found
  Jan 11 20:40:16 chrust passwd[10944]: pam_zfs_key(passwd:chauthtok): old token mismatch
  Jan 11 20:40:33 chrust sudo[10942]: pam_unix(sudo:session): session closed for user root
  Jan 11 20:40:35 chrust sudo[10946]: nabijaczleweli : TTY=pts/0 ; PWD=/home/nabijaczleweli ; USER=root ; COMMAND=/usr/bin/passwd testuser
  Jan 11 20:40:35 chrust sudo[10946]: pam_unix(sudo:session): session opened for user root(uid=0)
  by nabijaczleweli(uid=1000)
  Jan 11 20:40:35 chrust passwd[10948]: pam_zfs_key(passwd:chauthtok): dataset chrust-zoot/home/testuser not found
  Jan 11 20:40:35 chrust passwd[10948]: pam_zfs_key(passwd:chauthtok): old token mismatch
  Jan 11 20:40:38 chrust passwd[10948]: pam_unix(passwd:chauthtok): authentication failure; logname=nabijaczleweli uid=0 euid=0 tty= ruser= rhost=  user=testuser
  Jan 11 20:40:38 chrust passwd[10948]: pam_unix(passwd:chauthtok): user password changed by another process
  Jan 11 20:40:40 chrust sudo[10946]: pam_unix(sudo:session): session closed for user root

-- System Information:
Debian Release: trixie/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 6.6.9-amd64 (SMP w/2 CPU threads; PREEMPT)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=C.UTF-8, LC_CTYPE=C.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages adduser depends on:
ii  passwd  1:4.13+dfsg1-3+b1

adduser recommends no packages.

Versions of packages adduser suggests:
ii  cron                    3.0pl1-182
ii  liblocale-gettext-perl  1.07-6
ii  perl                    5.36.0-10+b1
pn  quota                   <none>

-- no debconf information
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-zfsonlinux-devel/attachments/20240111/d685a4cb/attachment.sig>