postfix: Can't install if /etc/shadow does not exist

[Debian Bug Importer]

Automatically imported from Debian bug report #330471 http://bugs.debian.org/330471

[Marc Haber (mh+debian-packages)]

On Thu, Sep 08, 2005 at 01:45:39AM +0300, Lars Wirzenius wrote:
> adduser calls (as far as I can determine, not knowing perl) chage for
> new system accounts unconditionally. chage fails when shadow passwords
> are not being used. This causes some packages to fail to install (at
> least under piuparts in a chroot).

passwd upstream has again changed the error code that adduser tries to
catch in that case.

Greetings
Marc

--
-----------------------------------------------------------------------------
Marc Haber | "I don't trust Computers. They | Mailadresse im Header
Mannheim, Germany | lose things." Winona Ryder | Fon: *49 621 72739834
Nordisch by Nature | How to make an American Quilt | Fax: *49 621 72739835

[Marc Haber (mh+debian-packages)]

On Thu, Sep 08, 2005 at 01:45:39AM +0300, Lars Wirzenius wrote:
> adduser calls (as far as I can determine, not knowing perl) chage for
> new system accounts unconditionally. chage fails when shadow passwords
> are not being used.

Actually, it shouldn't, starting with version 3.65:
  * do not abort if chage returns exit code 3. This is an indication
    that password aging cannot be set due to shadow not being enabled.
    Closes: #316089, #317944.

The only chage call, in line 397, has its return code handled in this
way.

However, the experimental version of shadow returns a different error
code on chage failure due to shadow not enabled, and adduser is not
yet adapted. Which version of shadow do you have installed?

Greetings
Marc

--
-----------------------------------------------------------------------------
Marc Haber | "I don't trust Computers. They | Mailadresse im Header
Mannheim, Germany | lose things." Winona Ryder | Fon: *49 621 72739834
Nordisch by Nature | How to make an American Quilt | Fax: *49 621 72739835

[Lars Wirzenius (liw-iki)]

to, 2005-09-08 kello 07:24 +0200, Marc Haber kirjoitti:
> However, the experimental version of shadow returns a different error
> code on chage failure due to shadow not enabled, and adduser is not
> yet adapted. Which version of shadow do you have installed?

The version in etch, 3.67 (same version in unstable, according to
packages.qa.debian.org). The following is the error messages I get, I've
attached the entire piuparts log file (the log is for bcron-run, which
tries to use adduser).

  chage: can't open shadow password fileadduser: `/usr/bin/chage -M
99999 cron'
returned error code 1. Aborting.

[Marc Haber (mh+debian-packages)]

On Thu, Sep 08, 2005 at 12:57:04PM +0300, Lars Wirzenius wrote:
> to, 2005-09-08 kello 07:24 +0200, Marc Haber kirjoitti:
> > However, the experimental version of shadow returns a different error
> > code on chage failure due to shadow not enabled, and adduser is not
> > yet adapted. Which version of shadow do you have installed?
>
> The version in etch, 3.67 (same version in unstable, according to
> packages.qa.debian.org). The following is the error messages I get, I've
> attached the entire piuparts log file (the log is for bcron-run, which
> tries to use adduser).
>
> chage: can't open shadow password fileadduser: `/usr/bin/chage -M
> 99999 cron'
> returned error code 1. Aborting.

Obviously, shadow in etch does not return a special error code, and
decided that it is better to fail for non-shadow setups instead of
ignoring all errors which would have been the alternative here.

This issue is going to be around until the experimental shadow has
migrated to etch and an adapted adduser has been uploaded.

Greetings
Marc

--
-----------------------------------------------------------------------------
Marc Haber | "I don't trust Computers. They | Mailadresse im Header
Mannheim, Germany | lose things." Winona Ryder | Fon: *49 621 72739834
Nordisch by Nature | How to make an American Quilt | Fax: *49 621 72739835

[Marc Haber (mh+debian-packages)]

tags #327144 confirmed
retitle #327144 shadow >= 1:4.0.3-37 needed for systems without shadow passwords
thanks

adduser 3.64 introduced code which uses chage to override forced
password changes for system accounts (see #298883).

This code unfortunately fails on systems that don't have shadow
passwords enabled since on non-shadow system no password aging is
possible.

To avoid having to ignore _all_ errors returned by chage, shadow
1:4.0.3-37 up to 1:4.0.11.1-1 had chage return 3 on non-shadow
systems. adduser 3.65 ignores return code 3 from chage, emitting a
warning only.

adduser 3.65 and up, combined with passwd << 1:4.0.3-37 do not support
non-shadow systems.

adduser 3.67.0 will force a reasonably recent passwd version to make
this clear. For older adduser versions, people will have package
installations fail, but will hopefully find this bug report in the BTS.

Unfortunately, shadow upstream decided to change chage's "no shadow
passwords" return code from 3 to 15. The adduser maintaines tried to
avoid this by coordinating with the shadow people, but they decided to
change the return code again nevertheless.

A later version of adduser will thus depend on passwd >= 1:4.0.12 to
synchronize the chage return code with is ignored with passwd.

Greetings
Marc

--
-----------------------------------------------------------------------------
Marc Haber | "I don't trust Computers. They | Mailadresse im Header
Mannheim, Germany | lose things." Winona Ryder | Fon: *49 621 72739834
Nordisch by Nature | How to make an American Quilt | Fax: *49 621 72739835

[Marc Haber (mh+debian-packages)]

Source: adduser
Source-Version: 3.67.0

We believe that the bug you reported is fixed in the latest version of
adduser, which is due to be installed in the Debian FTP archive:

adduser_3.67.0.dsc
  to pool/main/a/adduser/adduser_3.67.0.dsc
adduser_3.67.0.tar.gz
  to pool/main/a/adduser/adduser_3.67.0.tar.gz
adduser_3.67.0_all.deb
  to pool/main/a/adduser/adduser_3.67.0_all.deb

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to <email address hidden>,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Marc Haber <email address hidden> (supplier of updated adduser package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing <email address hidden>)

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.7
Date: Thu, 8 Sep 2005 16:51:54 +0000
Source: adduser
Binary: adduser
Architecture: source all
Version: 3.67.0
Distribution: unstable
Urgency: low
Maintainer: Debian Adduser Developers <email address hidden>
Changed-By: Marc Haber <email address hidden>
Description:
 adduser - Add and remove users and groups
Closes: 327144
Changes:
 adduser (3.67.0) unstable; urgency=low
 .
   * the "please no more bugs from users of shadowless systems"
     release. (mh) Closes: #327144
   * temporary branch
   * tighten dependencies to only allow installation with a passwd
     package whose chage returns 3 on "shadow password not enabled".
   * shadowless setups do only work with adduser older than 3.64, or
     with shadow younger than 1:4.0.3-37.
Files:
 38ff5696c83065344feeb5368448ba79 647 base important adduser_3.67.0.dsc
 6703b16cdd7e16051cf2a256f518f03e 125327 base important adduser_3.67.0.tar.gz
 6ce5fde2fc15485caa94c0a99b2717fb 110050 base important adduser_3.67.0_all.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iEYEARECAAYFAkMgcBAACgkQgZalRGu6PISBmgCfcgPDy/wr54DsmaLLuhqb1S3I
92wAn0xTEE6LZgs2d4uPptbfV09D6rMe
=yCuJ
-----END PGP SIGNATURE-----

[Marc Haber (mh+debian-packages)]

tag 323395 + fixed-in-experimental
tag 324699 + fixed-in-experimental
tag 327144 + fixed-in-experimental

quit

This message was generated automatically in response to an
upload to the experimental distribution. The .changes file follows.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.7
Date: Thu, 8 Sep 2005 17:18:18 +0000
Source: adduser
Binary: adduser
Architecture: source all
Version: 3.69
Distribution: experimental
Urgency: low
Maintainer: Debian Adduser Developers <email address hidden>
Changed-By: Marc Haber <email address hidden>
Description:
 adduser - Add and remove users and groups
Closes: 323395 324699 327144
Changes:
 adduser (3.69) experimental; urgency=low
 .
   * the "please no more bugs from users of shadowless systems"
     release. (mh) Closes: #327144
   * versioned depends on passwd >> 1:4.0.12 because of the changed
     chage exit code (now, 15) in the "shadow passwod not enabled"
     case. Earlier versions return 3 or even a normal 1 in that case.
   * shadowless setups do only work with adduser older than 3.64, or
     with passwd younger than 1:4.0.12.
   * make clear in 3.68 changelog that Jörg's patches were against adduser
   * patches by Jörg Hoh:
     - move common code to AdduserCommon.pm
     - deluser: use GetOpt instead of manual option parsing
     - deluser: restructure plausibility checks
     - deluser: introduce "use strict"
   * make adduser.conf.5 NAME_REGEX consistent with the code. Thanks to
     Christoph Ulrich Scholler. Closes: #323395.
   * show deluser that name_regex is a valid configuration directive.
     Thanks to Christoph Ulrich Scholler. Closes: #324699.
   * put new FSF street address in debian/copyright
Files:
 90d2d442edbb770c6d72d0bb6ba5737c 643 base important adduser_3.69.dsc
 3a9c8b695d09769323b3e08cf803444f 125807 base important adduser_3.69.tar.gz
 8761dc16383138c3d9afe1ad38dce1bc 110496 base important adduser_3.69_all.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iEYEARECAAYFAkMgc2sACgkQgZalRGu6PISSMgCcDcpKHt4/l13iAKmdCdGPivp7
VXMAniljvO+WEPwE1ABTWFiYjP91ilty
=UfgO
-----END PGP SIGNATURE-----

[Piotr Roszatycki (dexter)]

reassign 330471 adduser
severity 330471 normal
close 330471
merge 330471 327144
thanks

--
 .''`. Piotr Roszatycki, Netia SA
: :' : mailto:<email address hidden>
`. `' mailto:<email address hidden>
  `-

[Debian Bug Importer (debzilla)]

Automatically imported from Debian bug report #330471 http://bugs.debian.org/330471

[Debian Bug Importer (debzilla)]

Message-Id: <email address hidden>
Date: Wed, 28 Sep 2005 10:49:22 +0200
From: Piotr Roszatycki <email address hidden>
To: Debian Bug Tracking System <email address hidden>
Subject: postfix: Can't install if /etc/shadow does not exist

Package: postfix
Version: 2.2.4-1
Severity: grave
Justification: renders package unusable

(Reading database ... 11346 files and directories currently installed.)
Unpacking postfix (from .../postfix_2.2.4-1_i386.deb) ...
Setting up postfix (2.2.4-1) ...
Adding group `postfix' (102)...
Done.
Adding system user `postfix'...
Adding new user `postfix' (100) with group `postfix'.
chage: the shadow password file is not present
adduser: `/usr/bin/chage -M 99999 postfix' returned error code 15. Aborting.
Cleaning up.
Removing user `postfix'.
dpkg: error processing postfix (--configure):
 subprocess post-installation script returned error exit status 1

[Debian Bug Importer (debzilla)]

Message-Id: <email address hidden>
Date: Wed, 28 Sep 2005 11:05:42 +0200
From: Piotr Roszatycki <email address hidden>
To: <email address hidden>
Cc: <email address hidden>
Subject: Re: postfix: Can't install if /etc/shadow does not exist

merge 330471 327144
thanks

Ok, I've found it is the problem of adduser and shadow package.

--
 .''`. Piotr Roszatycki, Netia SA
: :' : mailto:<email address hidden>
`. `' mailto:<email address hidden>
  `-

[Debian Bug Importer (debzilla)]

Message-ID: <email address hidden>
Date: Wed, 28 Sep 2005 02:15:24 -0700
From: Steve Langasek <email address hidden>
To: Piotr Roszatycki <email address hidden>, <email address hidden>
Subject: Re: Bug#330471: postfix: Can't install if /etc/shadow does not exist

--dDRMvlgZJXvWKvBx
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Wed, Sep 28, 2005 at 10:49:22AM +0200, Piotr Roszatycki wrote:
> Package: postfix
> Version: 2.2.4-1
> Severity: grave
> Justification: renders package unusable

> (Reading database ... 11346 files and directories currently installed.)
> Unpacking postfix (from .../postfix_2.2.4-1_i386.deb) ...
> Setting up postfix (2.2.4-1) ...
> Adding group `postfix' (102)...
> Done.
> Adding system user `postfix'...
> Adding new user `postfix' (100) with group `postfix'.
> chage: the shadow password file is not present
> adduser: `/usr/bin/chage -M 99999 postfix' returned error code 15. Abort=
ing.
> Cleaning up.
> Removing user `postfix'.
> dpkg: error processing postfix (--configure):
> subprocess post-installation script returned error exit status 1

So don't screw up your system so that /etc/shadow is missing? Doesn't sound
like a bug to me. Why would you *want* a system without /etc/shadow?

--=20
Steve Langasek Give me a lever long enough and a Free OS
Debian Developer to set it on, and I can move the world.
<email address hidden> http://www.debian.org/

--dDRMvlgZJXvWKvBx
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: Digital signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQFDOl8sKN6ufymYLloRAr6WAKDNkgqirOqtgl7XxVfCT3oF66GOiACeOYIm
kjKS1v9oBZRyjFOmSK1SwxI=
=DOnT
-----END PGP SIGNATURE-----

--dDRMvlgZJXvWKvBx--

[Debian Bug Importer (debzilla)]

Message-Id: <email address hidden>
Date: Wed, 28 Sep 2005 11:19:05 +0200
From: Piotr Roszatycki <email address hidden>
To: Steve Langasek <email address hidden>
Cc: <email address hidden>
Subject: Re: Bug#330471: postfix: Can't install if /etc/shadow does not exist

On Wednesday 28 of September 2005 11:15, Steve Langasek wrote:
> > (Reading database ... 11346 files and directories currently installed.)
> > Unpacking postfix (from .../postfix_2.2.4-1_i386.deb) ...
> > Setting up postfix (2.2.4-1) ...
> > Adding group `postfix' (102)...
> > Done.
> > Adding system user `postfix'...
> > Adding new user `postfix' (100) with group `postfix'.
> > chage: the shadow password file is not present
> > adduser: `/usr/bin/chage -M 99999 postfix' returned error code 15.
> > Aborting. Cleaning up.
> > Removing user `postfix'.
> > dpkg: error processing postfix (--configure):
> > subprocess post-installation script returned error exit status 1
>
> So don't screw up your system so that /etc/shadow is missing? Doesn't
> sound like a bug to me. Why would you *want* a system without /etc/shadow?

The system without /etc/shadow is perfectly correct. Especially if it is
installed with pbuilder or debootstrap which does not create /etc/shadow.

--
 .''`. Piotr Roszatycki, Netia SA
: :' : mailto:<email address hidden>
`. `' mailto:<email address hidden>
  `-

[Debian Bug Importer (debzilla)]

Message-Id: <email address hidden>
Date: Wed, 28 Sep 2005 11:22:42 +0200
From: Piotr Roszatycki <email address hidden>
To: <email address hidden>
Cc: <email address hidden>
Subject: Re: postfix: Can't install if /etc/shadow does not exist

reassign 330471 adduser
severity 330471 normal
close 330471
merge 330471 327144
thanks

--
 .''`. Piotr Roszatycki, Netia SA
: :' : mailto:<email address hidden>
`. `' mailto:<email address hidden>
  `-

[Debian Bug Importer (debzilla)]

Message-Id: <email address hidden>
Date: Thu, 08 Sep 2005 01:45:39 +0300
From: Lars Wirzenius <email address hidden>
To: <email address hidden>
Subject: adduser: calls chage even when shadow passwords aren't being used

Package: adduser
Version: 3.67

adduser calls (as far as I can determine, not knowing perl) chage for
new system accounts unconditionally. chage fails when shadow passwords
are not being used. This causes some packages to fail to install (at
least under piuparts in a chroot).

Would it make sense to only call chage when /etc/shadow exists or
possibly only if the newly created account is in /etc/shadow?
(Alternatively, if shadowless configurations are to be unsupported, that
is fine by me, I'll fix piuparts to make such chroots.)

[Debian Bug Importer (debzilla)]

Message-ID: <email address hidden>
Date: Thu, 8 Sep 2005 07:12:49 +0200
From: Marc Haber <email address hidden>
To: Lars Wirzenius <email address hidden>, <email address hidden>
Subject: Re: Bug#327144: adduser: calls chage even when shadow passwords aren't being used

On Thu, Sep 08, 2005 at 01:45:39AM +0300, Lars Wirzenius wrote:
> adduser calls (as far as I can determine, not knowing perl) chage for
> new system accounts unconditionally. chage fails when shadow passwords
> are not being used. This causes some packages to fail to install (at
> least under piuparts in a chroot).

passwd upstream has again changed the error code that adduser tries to
catch in that case.

Greetings
Marc

--
-----------------------------------------------------------------------------
Marc Haber | "I don't trust Computers. They | Mailadresse im Header
Mannheim, Germany | lose things." Winona Ryder | Fon: *49 621 72739834
Nordisch by Nature | How to make an American Quilt | Fax: *49 621 72739835

[Debian Bug Importer (debzilla)]

Message-ID: <email address hidden>
Date: Thu, 8 Sep 2005 07:24:30 +0200
From: Marc Haber <email address hidden>
To: Lars Wirzenius <email address hidden>, <email address hidden>
Subject: Re: Bug#327144: adduser: calls chage even when shadow passwords aren't being used

On Thu, Sep 08, 2005 at 01:45:39AM +0300, Lars Wirzenius wrote:
> adduser calls (as far as I can determine, not knowing perl) chage for
> new system accounts unconditionally. chage fails when shadow passwords
> are not being used.

Actually, it shouldn't, starting with version 3.65:
  * do not abort if chage returns exit code 3. This is an indication
    that password aging cannot be set due to shadow not being enabled.
    Closes: #316089, #317944.

The only chage call, in line 397, has its return code handled in this
way.

However, the experimental version of shadow returns a different error
code on chage failure due to shadow not enabled, and adduser is not
yet adapted. Which version of shadow do you have installed?

Greetings
Marc

--
-----------------------------------------------------------------------------
Marc Haber | "I don't trust Computers. They | Mailadresse im Header
Mannheim, Germany | lose things." Winona Ryder | Fon: *49 621 72739834
Nordisch by Nature | How to make an American Quilt | Fax: *49 621 72739835

[Debian Bug Importer (debzilla)]

Message-Id: <email address hidden>
Date: Thu, 08 Sep 2005 12:57:04 +0300
From: Lars Wirzenius <email address hidden>
To: Marc Haber <email address hidden>
Cc: <email address hidden>
Subject: Re: Bug#327144: adduser: calls chage even when shadow passwords
 aren't being used

--=-6fPvBXkAoLJxnPAB3L4h
Content-Type: text/plain
Content-Transfer-Encoding: 7bit

to, 2005-09-08 kello 07:24 +0200, Marc Haber kirjoitti:
> However, the experimental version of shadow returns a different error
> code on chage failure due to shadow not enabled, and adduser is not
> yet adapted. Which version of shadow do you have installed?

The version in etch, 3.67 (same version in unstable, according to
packages.qa.debian.org). The following is the error messages I get, I've
attached the entire piuparts log file (the log is for bcron-run, which
tries to use adduser).

  chage: can't open shadow password fileadduser: `/usr/bin/chage -M
99999 cron'
returned error code 1. Aborting.

--=-6fPvBXkAoLJxnPAB3L4h
Content-Disposition: attachment; filename=bcron-run.log
Content-Type: text/x-log; name=bcron-run.log; charset=ISO-8859-1
Content-Transfer-Encoding: base64
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...

[Debian Bug Importer (debzilla)]

Message-ID: <email address hidden>
Date: Thu, 8 Sep 2005 14:35:03 +0200
From: Marc Haber <email address hidden>
To: Lars Wirzenius <email address hidden>
Cc: <email address hidden>
Subject: Re: Bug#327144: adduser: calls chage even when shadow passwords aren't being used

On Thu, Sep 08, 2005 at 12:57:04PM +0300, Lars Wirzenius wrote:
> to, 2005-09-08 kello 07:24 +0200, Marc Haber kirjoitti:
> > However, the experimental version of shadow returns a different error
> > code on chage failure due to shadow not enabled, and adduser is not
> > yet adapted. Which version of shadow do you have installed?
>
> The version in etch, 3.67 (same version in unstable, according to
> packages.qa.debian.org). The following is the error messages I get, I've
> attached the entire piuparts log file (the log is for bcron-run, which
> tries to use adduser).
>
> chage: can't open shadow password fileadduser: `/usr/bin/chage -M
> 99999 cron'
> returned error code 1. Aborting.

Obviously, shadow in etch does not return a special error code, and
decided that it is better to fail for non-shadow setups instead of
ignoring all errors which would have been the alternative here.

This issue is going to be around until the experimental shadow has
migrated to etch and an adapted adduser has been uploaded.

Greetings
Marc

--
-----------------------------------------------------------------------------
Marc Haber | "I don't trust Computers. They | Mailadresse im Header
Mannheim, Germany | lose things." Winona Ryder | Fon: *49 621 72739834
Nordisch by Nature | How to make an American Quilt | Fax: *49 621 72739835

[Debian Bug Importer (debzilla)]

Message-ID: <email address hidden>
Date: Thu, 8 Sep 2005 19:02:35 +0200
From: Marc Haber <email address hidden>
To: <email address hidden>, <email address hidden>
Cc: Marc Haber <email address hidden>
Subject: Re: Bug#327144: adduser: calls chage even when shadow passwords aren't being used

tags #327144 confirmed
retitle #327144 shadow >= 1:4.0.3-37 needed for systems without shadow passwords
thanks

adduser 3.64 introduced code which uses chage to override forced
password changes for system accounts (see #298883).

This code unfortunately fails on systems that don't have shadow
passwords enabled since on non-shadow system no password aging is
possible.

To avoid having to ignore _all_ errors returned by chage, shadow
1:4.0.3-37 up to 1:4.0.11.1-1 had chage return 3 on non-shadow
systems. adduser 3.65 ignores return code 3 from chage, emitting a
warning only.

adduser 3.65 and up, combined with passwd << 1:4.0.3-37 do not support
non-shadow systems.

adduser 3.67.0 will force a reasonably recent passwd version to make
this clear. For older adduser versions, people will have package
installations fail, but will hopefully find this bug report in the BTS.

Unfortunately, shadow upstream decided to change chage's "no shadow
passwords" return code from 3 to 15. The adduser maintaines tried to
avoid this by coordinating with the shadow people, but they decided to
change the return code again nevertheless.

A later version of adduser will thus depend on passwd >= 1:4.0.12 to
synchronize the chage return code with is ignored with passwd.

Greetings
Marc

--
-----------------------------------------------------------------------------
Marc Haber | "I don't trust Computers. They | Mailadresse im Header
Mannheim, Germany | lose things." Winona Ryder | Fon: *49 621 72739834
Nordisch by Nature | How to make an American Quilt | Fax: *49 621 72739835

[Debian Bug Importer (debzilla)]

Message-Id: <email address hidden>
Date: Thu, 08 Sep 2005 10:17:03 -0700
From: Marc Haber <email address hidden>
To: <email address hidden>
Subject: Bug#327144: fixed in adduser 3.67.0

Source: adduser
Source-Version: 3.67.0

We believe that the bug you reported is fixed in the latest version of
adduser, which is due to be installed in the Debian FTP archive:

adduser_3.67.0.dsc
  to pool/main/a/adduser/adduser_3.67.0.dsc
adduser_3.67.0.tar.gz
  to pool/main/a/adduser/adduser_3.67.0.tar.gz
adduser_3.67.0_all.deb
  to pool/main/a/adduser/adduser_3.67.0_all.deb

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to <email address hidden>,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Marc Haber <email address hidden> (supplier of updated adduser package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing <email address hidden>)

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.7
Date: Thu, 8 Sep 2005 16:51:54 +0000
Source: adduser
Binary: adduser
Architecture: source all
Version: 3.67.0
Distribution: unstable
Urgency: low
Maintainer: Debian Adduser Developers <email address hidden>
Changed-By: Marc Haber <email address hidden>
Description:
 adduser - Add and remove users and groups
Closes: 327144
Changes:
 adduser (3.67.0) unstable; urgency=low
 .
   * the "please no more bugs from users of shadowless systems"
     release. (mh) Closes: #327144
   * temporary branch
   * tighten dependencies to only allow installation with a passwd
     package whose chage returns 3 on "shadow password not enabled".
   * shadowless setups do only work with adduser older than 3.64, or
     with shadow younger than 1:4.0.3-37.
Files:
 38ff5696c83065344feeb5368448ba79 647 base important adduser_3.67.0.dsc
 6703b16cdd7e16051cf2a256f518f03e 125327 base important adduser_3.67.0.tar.gz
 6ce5fde2fc15485caa94c0a99b2717fb 110050 base important adduser_3.67.0_all.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iEYEARECAAYFAkMgcBAACgkQgZalRGu6PISBmgCfcgPDy/wr54DsmaLLuhqb1S3I
92wAn0xTEE6LZgs2d4uPptbfV09D6rMe
=yCuJ
-----END PGP SIGNATURE-----

[Debian Bug Importer (debzilla)]

Message-Id: <email address hidden>
Date: Thu, 08 Sep 2005 10:32:04 -0700
From: Marc Haber <email address hidden>
To: <email address hidden>
Cc: Marc Haber <email address hidden>,
 Debian Adduser Developers <email address hidden>
Subject: Fixed in upload of adduser 3.69 to experimental

tag 323395 + fixed-in-experimental
tag 324699 + fixed-in-experimental
tag 327144 + fixed-in-experimental

quit

This message was generated automatically in response to an
upload to the experimental distribution. The .changes file follows.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.7
Date: Thu, 8 Sep 2005 17:18:18 +0000
Source: adduser
Binary: adduser
Architecture: source all
Version: 3.69
Distribution: experimental
Urgency: low
Maintainer: Debian Adduser Developers <email address hidden>
Changed-By: Marc Haber <email address hidden>
Description:
 adduser - Add and remove users and groups
Closes: 323395 324699 327144
Changes:
 adduser (3.69) experimental; urgency=low
 .
   * the "please no more bugs from users of shadowless systems"
     release. (mh) Closes: #327144
   * versioned depends on passwd >> 1:4.0.12 because of the changed
     chage exit code (now, 15) in the "shadow passwod not enabled"
     case. Earlier versions return 3 or even a normal 1 in that case.
   * shadowless setups do only work with adduser older than 3.64, or
     with passwd younger than 1:4.0.12.
   * make clear in 3.68 changelog that Jörg's patches were against adduser
   * patches by Jörg Hoh:
     - move common code to AdduserCommon.pm
     - deluser: use GetOpt instead of manual option parsing
     - deluser: restructure plausibility checks
     - deluser: introduce "use strict"
   * make adduser.conf.5 NAME_REGEX consistent with the code. Thanks to
     Christoph Ulrich Scholler. Closes: #323395.
   * show deluser that name_regex is a valid configuration directive.
     Thanks to Christoph Ulrich Scholler. Closes: #324699.
   * put new FSF street address in debian/copyright
Files:
 90d2d442edbb770c6d72d0bb6ba5737c 643 base important adduser_3.69.dsc
 3a9c8b695d09769323b3e08cf803444f 125807 base important adduser_3.69.tar.gz
 8761dc16383138c3d9afe1ad38dce1bc 110496 base important adduser_3.69_all.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iEYEARECAAYFAkMgc2sACgkQgZalRGu6PISSMgCcDcpKHt4/l13iAKmdCdGPivp7
VXMAniljvO+WEPwE1ABTWFiYjP91ilty
=UfgO
-----END PGP SIGNATURE-----

[Fabio Massimo Di Nitto (fabbione)]

no shadow? tsk :)

[Marc Haber (mh+debian-packages)]

merge #330743 #330471
thanks

--
-----------------------------------------------------------------------------
Marc Haber | "I don't trust Computers. They | Mailadresse im Header
Mannheim, Germany | lose things." Winona Ryder | Fon: *49 621 72739834
Nordisch by Nature | How to make an American Quilt | Fax: *49 621 72739835

[Debian Bug Importer (debzilla)]

Message-ID: <email address hidden>
Date: Fri, 30 Sep 2005 07:50:14 +0200
From: Marc Haber <email address hidden>
To: <email address hidden>
Subject: Re: Bug#330743: Re: Bug#330743: cups-pdf: No longer installable when not using shadow
 passwords.

merge #330743 #330471
thanks

--
-----------------------------------------------------------------------------
Marc Haber | "I don't trust Computers. They | Mailadresse im Header
Mannheim, Germany | lose things." Winona Ryder | Fon: *49 621 72739834
Nordisch by Nature | How to make an American Quilt | Fax: *49 621 72739835

[LaMont Jones (lamont)]

close 396186
merge 396186 330471

[Marc Haber (mh+debian-packages)]

package adduser
tags #396186 - confirmed fixed-in-experimental
user <email address hidden>
usertags #396186 close-20061231
thanks

On Mon, Oct 30, 2006 at 11:52:29AM +0000, Kevin Campbell wrote:
> Adding group `bind' (GID 112) ...
> Done.
> Adding system user `bind' (UID 107) ...
> Adding new user `bind' (UID 107) with group `bind' ...
> chage: the shadow password file is not present
> /usr/bin/chage failed with return code 15, shadow not enabled, password aging cannot be set. Continuing.
> Not creating home directory `/var/cache/bind'.
> wrote key file "/etc/bind/rndc.key"
> Starting domain name service...: bind.

All I see here is an adduser warning and a successful bind install.
Please elaborate about which bug might be present here.

This bug will be closed on 2006-12-31 if I am not convinced by then
that there is an adduser bug.

Greetings
Marc

--
-----------------------------------------------------------------------------
Marc Haber | "I don't trust Computers. They | Mailadresse im Header
Mannheim, Germany | lose things." Winona Ryder | Fon: *49 621 72739834
Nordisch by Nature | How to make an American Quilt | Fax: *49 621 72739835

[Marc Haber (mh+debian-packages)]

Version: 3.100

On Thu, Sep 08, 2005 at 10:17:03AM -0700, Marc Haber wrote:
> We believe that the bug you reported is fixed in the latest version of
> adduser, which is due to be installed in the Debian FTP archive:
>
> adduser_3.67.0.dsc
> to pool/main/a/adduser/adduser_3.67.0.dsc
> adduser_3.67.0.tar.gz
> to pool/main/a/adduser/adduser_3.67.0.tar.gz
> adduser_3.67.0_all.deb
> to pool/main/a/adduser/adduser_3.67.0_all.deb

That does not seem to have worked. retrying.

Greetings
Marc

--
-----------------------------------------------------------------------------
Marc Haber | "I don't trust Computers. They | Mailadresse im Header
Mannheim, Germany | lose things." Winona Ryder | Fon: *49 621 72739834
Nordisch by Nature | How to make an American Quilt | Fax: *49 621 72739835