| 2015-07-17 18:39:04 |
kevin gunn |
bug |
|
|
added bug |
| 2015-07-17 18:41:06 |
kevin gunn |
bug task added |
|
canonical-devices-system-image |
|
| 2015-07-17 18:41:19 |
kevin gunn |
canonical-devices-system-image: importance |
Undecided |
High |
|
| 2015-07-17 18:41:21 |
kevin gunn |
shadow (Ubuntu): importance |
Undecided |
High |
|
| 2015-07-17 18:50:47 |
Christopher Townsend |
bug |
|
|
added subscriber Christopher Townsend |
| 2015-07-17 19:06:46 |
Steve Langasek |
summary |
changes to phablet to enable moduser on vivid+stable overlay ppa |
usermod --add-subuids fails for users not in /etc/passwd |
|
| 2015-07-17 19:19:12 |
Steve Langasek |
bug |
|
|
added subscriber Serge Hallyn |
| 2015-07-17 19:31:36 |
Launchpad Janitor |
branch linked |
|
lp:~vorlon/ubuntu/wily/shadow/lp.1475749 |
|
| 2015-07-20 17:18:58 |
Serge Hallyn |
shadow (Ubuntu): status |
New |
Triaged |
|
| 2015-07-21 05:55:31 |
Launchpad Janitor |
branch linked |
|
lp:ubuntu/wily-proposed/shadow |
|
| 2015-07-21 06:12:03 |
Steve Langasek |
description |
currently we have need to utilize lxc on vivid+stable overlay which requires adding subuser & subgroup ids.
unfortunately, usermod currently fails since phablet password is readonly |
[SRU justification]
The (distro patched) subuid/subgid support in the shadow 'usermod' command only works with users present in /etc/passwd. As /etc/subuid and /etc/subgid are separate databases that do not require modification of /etc/passwd, this is an unnecessary restriction that appears to be due to a simple logic bug in the patch and not as a deliberate design decision. As Ubuntu Touch and Ubuntu Snappy systems will as a class have users in different NSS backends from /etc/passwd, and lxc should be supported for these users with uid namespacing, this bug warrants fixing.
[Test case]
1. Install the libnss-extrausers package
2. Enable it by running "sudo sed -i -e'/passwd:/ s/$/ extrausers/' /etc/nsswitch.conf"
3. Create a test user by running "echo 'testuser:x:2000:2000::/nonexistent:/bin/false' | sudo tee /var/lib/extrausers/passwd"
4. Attempt to add subuids for this user by running "sudo usermod --add-subuids 10000-12000 testuser"
5. Confirm that this fails with the error message "usermod: user 'testuser' does not exist in /etc/passwd"
6. Install the new version of the 'passwd' package
7. Repeat the test from step 4
8. Confirm that the command now succeeds, and the user's entry has been added to /etc/subuids
9. Clean up by running 'sudo usermod --del-subuids 10000-12000 testuser" and removing the /var/lib/extrausers/passwd file
[Regression potential]
This is a targeted bugfix in the behavior of usermod, and users are unlikely to be relying on the usermod command failing for non-local users.
[Original report]
currently we have need to utilize lxc on vivid+stable overlay which requires adding subuser & subgroup ids.
unfortunately, usermod currently fails since phablet password is readonly |
|
| 2015-07-21 06:25:32 |
Steve Langasek |
description |
[SRU justification]
The (distro patched) subuid/subgid support in the shadow 'usermod' command only works with users present in /etc/passwd. As /etc/subuid and /etc/subgid are separate databases that do not require modification of /etc/passwd, this is an unnecessary restriction that appears to be due to a simple logic bug in the patch and not as a deliberate design decision. As Ubuntu Touch and Ubuntu Snappy systems will as a class have users in different NSS backends from /etc/passwd, and lxc should be supported for these users with uid namespacing, this bug warrants fixing.
[Test case]
1. Install the libnss-extrausers package
2. Enable it by running "sudo sed -i -e'/passwd:/ s/$/ extrausers/' /etc/nsswitch.conf"
3. Create a test user by running "echo 'testuser:x:2000:2000::/nonexistent:/bin/false' | sudo tee /var/lib/extrausers/passwd"
4. Attempt to add subuids for this user by running "sudo usermod --add-subuids 10000-12000 testuser"
5. Confirm that this fails with the error message "usermod: user 'testuser' does not exist in /etc/passwd"
6. Install the new version of the 'passwd' package
7. Repeat the test from step 4
8. Confirm that the command now succeeds, and the user's entry has been added to /etc/subuids
9. Clean up by running 'sudo usermod --del-subuids 10000-12000 testuser" and removing the /var/lib/extrausers/passwd file
[Regression potential]
This is a targeted bugfix in the behavior of usermod, and users are unlikely to be relying on the usermod command failing for non-local users.
[Original report]
currently we have need to utilize lxc on vivid+stable overlay which requires adding subuser & subgroup ids.
unfortunately, usermod currently fails since phablet password is readonly |
[SRU justification]
The (distro patched) subuid/subgid support in the shadow 'usermod' command only works with users present in /etc/passwd. As /etc/subuid and /etc/subgid are separate databases that do not require modification of /etc/passwd, this is an unnecessary restriction that appears to be due to a simple logic bug in the patch and not as a deliberate design decision. As Ubuntu Touch and Ubuntu Snappy systems will as a class have users in different NSS backends from /etc/passwd, and lxc should be supported for these users with uid namespacing, this bug warrants fixing.
[Test case]
1. Install the libnss-extrausers package
2. Enable it by running "sudo sed -i -e'/passwd:/ s/$/ extrausers/' /etc/nsswitch.conf"
3. Create a test user by running "echo 'testuser:x:2000:2000::/nonexistent:/bin/false' | sudo tee /var/lib/extrausers/passwd"
4. Attempt to add subuids for this user by running "sudo usermod --add-subuids 10000-12000 testuser"
5. Confirm that this fails with the error message "usermod: user 'testuser' does not exist in /etc/passwd"
6. Install the new version of the 'passwd' package
7. Repeat the test from step 4
8. Confirm that the command now succeeds, and the user's entry has been added to /etc/subuid
9. Clean up by running 'sudo usermod --del-subuids 10000-12000 testuser" and removing the /var/lib/extrausers/passwd file
[Regression potential]
This is a targeted bugfix in the behavior of usermod, and users are unlikely to be relying on the usermod command failing for non-local users.
[Original report]
currently we have need to utilize lxc on vivid+stable overlay which requires adding subuser & subgroup ids.
unfortunately, usermod currently fails since phablet password is readonly |
|
| 2015-07-21 07:49:18 |
Launchpad Janitor |
shadow (Ubuntu): status |
Triaged |
Fix Released |
|
| 2015-07-22 13:38:55 |
Chris J Arges |
nominated for series |
|
Ubuntu Vivid |
|
| 2015-07-22 13:38:55 |
Chris J Arges |
bug task added |
|
shadow (Ubuntu Vivid) |
|
| 2015-07-22 13:43:51 |
Chris J Arges |
shadow (Ubuntu Vivid): status |
New |
Fix Committed |
|
| 2015-07-22 13:43:52 |
Chris J Arges |
bug |
|
|
added subscriber Ubuntu Stable Release Updates Team |
| 2015-07-22 13:43:57 |
Chris J Arges |
bug |
|
|
added subscriber SRU Verification |
| 2015-07-22 13:44:00 |
Chris J Arges |
tags |
|
verification-needed |
|
| 2015-07-22 13:59:22 |
Launchpad Janitor |
branch linked |
|
lp:ubuntu/vivid-proposed/shadow |
|
| 2015-09-09 19:35:12 |
Ubuntu Foundations Team Bug Bot |
bug |
|
|
added subscriber Brian Murray |
| 2015-09-09 19:35:16 |
Ubuntu Foundations Team Bug Bot |
tags |
verification-needed |
verification-failed verification-needed |
|
| 2015-09-10 23:30:18 |
Serge Hallyn |
tags |
verification-failed verification-needed |
bot-stop-nagging verification-needed |
|
| 2015-09-11 19:35:26 |
Ubuntu Foundations Team Bug Bot |
tags |
bot-stop-nagging verification-needed |
bot-stop-nagging verification-failed verification-needed |
|
| 2015-09-14 17:56:21 |
Serge Hallyn |
tags |
bot-stop-nagging verification-failed verification-needed |
bot-stop-nagging verification-needed |
|
| 2015-10-16 12:20:24 |
Pat McGowan |
canonical-devices-system-image: status |
New |
Fix Released |
|
| 2015-11-02 20:20:44 |
Mathew Hodson |
shadow (Ubuntu Vivid): importance |
Undecided |
High |
|
| 2015-11-02 20:22:14 |
Mathew Hodson |
tags |
bot-stop-nagging verification-needed |
verification-needed vivid |
|
| 2015-11-03 18:08:39 |
Serge Hallyn |
shadow (Ubuntu Vivid): status |
Fix Committed |
Confirmed |
|
| 2015-11-03 18:27:10 |
Serge Hallyn |
shadow (Ubuntu Vivid): status |
Confirmed |
Fix Committed |
|
| 2015-11-03 18:38:33 |
Serge Hallyn |
tags |
verification-needed vivid |
verification-done vivid |
|
| 2015-11-04 16:44:01 |
Launchpad Janitor |
shadow (Ubuntu Vivid): status |
Fix Committed |
Fix Released |
|
| 2015-11-04 16:44:05 |
Chris J Arges |
removed subscriber Ubuntu Stable Release Updates Team |
|
|
|
