Login passwords incorrect on some newly installed 1.0.1 systems

DoneSubmitted by pelzflorian (Florian Pelz).
Details
3 participants
  • Andreas Enge
  • Ludovic Courtès
  • pelzflorian (Florian Pelz)
Owner
unassigned
Severity
normal
P
P
pelzflorian (Florian Pelz) wrote on 20 May 2019 11:38
Download
(address . bug-guix@gnu.org)
20190520093855.3ldl2mjhgi3fx6qz@pelzflorian.localdomain
Download
Login fails with
Login incorrect
on a system newly installed from the 1.0.1 ISO image — on only somereinstalls. Maybe it was my fault, but maybe not, it is kind ofspooky. Can others reproduce?
The first time the password was correctly set to x in /etc/passwd andin /etc/shadow the line looked normal. Maybe I made a typo whensetting up the password?
I tried to reproduce with a less sensitive password “y” for root and Ibelieve an empty user password or maybe “y” too; now I got no userentry in /etc/passwd and /etc/shadow but can log in as root.
This was the content of /etc/passwd:
root:x:0:0::/root:/gnu/store/qn1ax1fkj16x280m1rv7mcimfmn9l2pf-bash-4.4.23/bin/bashnobody:x:65534:997::/nonexistent:/gnu/store/dl8k19fivmv181d81lpn1nadsf219ky8-shadow-4.6/sbin/nologinguixbuilder01:x:999:30000:Guix Build User 1:/var/empty:/gnu/store/dl8k19fivmv181d81lpn1nadsf219ky8-shadow-4.6/sbin/nologinguixbuilder02:x:998:30000:Guix Build User 2:/var/empty:/gnu/store/dl8k19fivmv181d81lpn1nadsf219ky8-shadow-4.6/sbin/nologinguixbuilder03:x:997:30000:Guix Build User 3:/var/empty:/gnu/store/dl8k19fivmv181d81lpn1nadsf219ky8-shadow-4.6/sbin/nologinguixbuilder04:x:996:30000:Guix Build User 4:/var/empty:/gnu/store/dl8k19fivmv181d81lpn1nadsf219ky8-shadow-4.6/sbin/nologinguixbuilder05:x:995:30000:Guix Build User 5:/var/empty:/gnu/store/dl8k19fivmv181d81lpn1nadsf219ky8-shadow-4.6/sbin/nologinguixbuilder06:x:994:30000:Guix Build User 6:/var/empty:/gnu/store/dl8k19fivmv181d81lpn1nadsf219ky8-shadow-4.6/sbin/nologinguixbuilder07:x:993:30000:Guix Build User 7:/var/empty:/gnu/store/dl8k19fivmv181d81lpn1nadsf219ky8-shadow-4.6/sbin/nologinguixbuilder08:x:992:30000:Guix Build User 8:/var/empty:/gnu/store/dl8k19fivmv181d81lpn1nadsf219ky8-shadow-4.6/sbin/nologinguixbuilder09:x:991:30000:Guix Build User 9:/var/empty:/gnu/store/dl8k19fivmv181d81lpn1nadsf219ky8-shadow-4.6/sbin/nologinguixbuilder10:x:990:30000:Guix Build User 10:/var/empty:/gnu/store/dl8k19fivmv181d81lpn1nadsf219ky8-shadow-4.6/sbin/nologinmessagebus:x:989:983:D-Bus system bus user:/var/run/dbus:/gnu/store/dl8k19fivmv181d81lpn1nadsf219ky8-shadow-4.6/sbin/nologinpolkitd:x:988:982:Polkit daemon user:/var/empty:/run/current-system/profile/sbin/nologin
The content of /etc/shadow was
root:$6$vWBy92HZjt$P.g83qzyyuZ0AebfKjsS/gZV.1SlaMkUqsmsO9cP1yXtpsCIE.9gDNDtMVwZWa..wmvVNqjqgjg7OFhKadshF.:18036::::::nobody:!:18036::::::guixbuilder01:!:18036::::::guixbuilder02:!:18036::::::guixbuilder03:!:18036::::::guixbuilder04:!:18036::::::guixbuilder05:!:18036::::::guixbuilder06:!:18036::::::guixbuilder07:!:18036::::::guixbuilder08:!:18036::::::guixbuilder09:!:18036::::::guixbuilder10:!:18036::::::messagebus:!:18036::::::polkitd:!:18036::::::
Maybe I turned off my computer at the wrong time when booting into theinstalled system? But the passwords get set up before the first boot,don’t they? I reinstalled again since then. Now it works.
Regards,Florian
L
L
Ludovic Courtès wrote on 20 May 2019 17:01
Download
(name . pelzflorian (Florian Pelz))(address . pelzflorian@pelzflorian.de)(address . 35806@debbugs.gnu.org)
87o93xrwyz.fsf@gnu.org
Download
Hi!
"pelzflorian (Florian Pelz)" <pelzflorian@pelzflorian.de> skribis:
Toggle quote (4 lines)> on a system newly installed from the 1.0.1 ISO image — on only some> reinstalls. Maybe it was my fault, but maybe not, it is kind of> spooky. Can others reproduce?
No. (I did many installs in VMs before the release… :-))
Note that you can check by doing an install in a VM using the attachedscript.
Toggle quote (4 lines)> The content of /etc/shadow was>> root:$6$vWBy92HZjt$P.g83qzyyuZ0AebfKjsS/gZV.1SlaMkUqsmsO9cP1yXtpsCIE.9gDNDtMVwZWa..wmvVNqjqgjg7OFhKadshF.:18036::::::
So a password was set, as expected. Maybe you tried the wrong password,or with the wrong keyboard layout?
Thanks,Ludo’.
Download
#!/bin/shset -eset -xISO="$(./pre-inst-env guix system disk-image --file-system-type=iso9660 gnu/system/install.scm)"qemu-img create -f qcow2 /tmp/t.img 10G
#EFI_OPTS="-bios $(guix build ovmf)/share/firmware/ovmf_x64.bin"
exec qemu-system-x86_64 -enable-kvm -hda /tmp/t.img -cdrom "$ISO" -m 1024 -boot d -net user -net nic,model=virtio -no-reboot $EFI_OPTS
P
P
pelzflorian (Florian Pelz) wrote on 20 May 2019 22:02
Download
(name . Ludovic Courtès)(address . ludo@gnu.org)(address . 35806@debbugs.gnu.org)
20190520200251.34xfc6ik53hr6z5k@pelzflorian.localdomain
Download
On Mon, May 20, 2019 at 05:01:40PM +0200, Ludovic Courtès wrote:
Toggle quote (10 lines)> Hi!> > "pelzflorian (Florian Pelz)" <pelzflorian@pelzflorian.de> skribis:> > > on a system newly installed from the 1.0.1 ISO image — on only some> > reinstalls. Maybe it was my fault, but maybe not, it is kind of> > spooky. Can others reproduce?> > No. (I did many installs in VMs before the release… :-))
OK. I consider it likely that a typo was the reason for the wrongpassword on the first install.
However, the second install had no normal user account, as you can seein my /etc/shadow (which is attached again). It should not have beenpossible to install without user account. Now that I think about it,I believe when I got shown the user account creation page in theinstaller, I accidentally immediately pressed some key (maybe Enter)and it threw me back to the locale selection. I configured everythingagain, but I believe this was the reason no user account was created.
I could now make the user account creation page crash again byentering a wrong password confirmation, but after going through theinstaller again, the resulting config contains a user and I can login.I do not know how I managed to break this.
Toggle quote (5 lines)> > Note that you can check by doing an install in a VM using the attached> script.>
Thank you. For now I’ll try on real hardware though.
Regards,Florian
Download
root:$6$vWBy92HZjt$P.g83qzyyuZ0AebfKjsS/gZV.1SlaMkUqsmsO9cP1yXtpsCIE.9gDNDtMVwZWa..wmvVNqjqgjg7OFhKadshF.:18036::::::nobody:!:18036::::::guixbuilder01:!:18036::::::guixbuilder02:!:18036::::::guixbuilder03:!:18036::::::guixbuilder04:!:18036::::::guixbuilder05:!:18036::::::guixbuilder06:!:18036::::::guixbuilder07:!:18036::::::guixbuilder08:!:18036::::::guixbuilder09:!:18036::::::guixbuilder10:!:18036::::::messagebus:!:18036::::::polkitd:!:18036::::::
L
L
Ludovic Courtès wrote on 20 May 2019 22:36
Download
(name . pelzflorian (Florian Pelz))(address . pelzflorian@pelzflorian.de)(address . 35806@debbugs.gnu.org)
87imu4q2wf.fsf@gnu.org
Download
Hi,
"pelzflorian (Florian Pelz)" <pelzflorian@pelzflorian.de> skribis:
Toggle quote (13 lines)> However, the second install had no normal user account, as you can see> in my /etc/shadow (which is attached again). It should not have been> possible to install without user account. Now that I think about it,> I believe when I got shown the user account creation page in the> installer, I accidentally immediately pressed some key (maybe Enter)> and it threw me back to the locale selection. I configured everything> again, but I believe this was the reason no user account was created.>> I could now make the user account creation page crash again by> entering a wrong password confirmation, but after going through the> installer again, the resulting config contains a user and I can login.> I do not know how I managed to break this.
Could you file a bug specifically for this one if you managed toreproduce it?
Toggle quote (6 lines)>> Note that you can check by doing an install in a VM using the attached>> script.>>>> Thank you. For now I’ll try on real hardware though.
Well that’s even better. :-)
Should we consider this bug closed?
Thanks,Ludo’.
P
P
pelzflorian (Florian Pelz) wrote on 20 May 2019 22:41
Download
(name . Ludovic Courtès)(address . ludo@gnu.org)(address . 35806@debbugs.gnu.org)
20190520204133.hf6oihw2k3zcycwk@pelzflorian.localdomain
Download
On Mon, May 20, 2019 at 10:36:32PM +0200, Ludovic Courtès wrote:
Toggle quote (21 lines)> Hi,> > "pelzflorian (Florian Pelz)" <pelzflorian@pelzflorian.de> skribis:> > > However, the second install had no normal user account, as you can see> > in my /etc/shadow (which is attached again). It should not have been> > possible to install without user account. Now that I think about it,> > I believe when I got shown the user account creation page in the> > installer, I accidentally immediately pressed some key (maybe Enter)> > and it threw me back to the locale selection. I configured everything> > again, but I believe this was the reason no user account was created.> >> > I could now make the user account creation page crash again by> > entering a wrong password confirmation, but after going through the> > installer again, the resulting config contains a user and I can login.> > I do not know how I managed to break this.> > Could you file a bug specifically for this one if you managed to> reproduce it?>
I will try and then file a more specific bug.
Toggle quote (11 lines)> >> Note that you can check by doing an install in a VM using the attached> >> script.> >>> >> > Thank you. For now I’ll try on real hardware though.> > Well that’s even better. :-)> > Should we consider this bug closed?>
Yes.
Regards,Florian
L
L
Ludovic Courtès wrote on 21 May 2019 10:09
Download
control message for bug #35806
(address . control@debbugs.gnu.org)
87k1ek6xga.fsf@gnu.org
Download
tags 35806 notabugclose 35806
A
A
Andreas Enge wrote on 27 May 2019 12:03
Download
Re: bug#35806: Login passwords incorrect on some newly installed 1.0.1 systems
(name . pelzflorian (Florian Pelz))(address . pelzflorian@pelzflorian.de)
20190527100342.GA5609@jurong
Download
So closing it by cc-ing 35806-done@debbugs.gnu.org.
Andreas
Closed
?
Your comment

This issue is archived.

To comment on this conversation send email to 35806@debbugs.gnu.org