ssh: No user exists for uid 1000

  • Done
  • quality assurance status badge
Details
2 participants
  • Andreas Enge
  • Leo Famulari
Owner
unassigned
Submitted by
Andreas Enge
Severity
normal
Merged with

Debbugs page

Andreas Enge wrote 7 years ago
(address . bug-guix@gnu.org)
20180219230645.GA5650@jurong
Hello,

it looks like the glibc change when merging core-updates caused us to be
bitten by a bug that is known on NixOS:

When I type "ssh whatever" (literally, or replacing "whatever" by a real
server name), then the error message
No user exists for uid 1000
is printed and the ssh command is not executed.

I am using guix on top of debian.

Andreas
Leo Famulari wrote 7 years ago
(name . Andreas Enge)(address . andreas@enge.fr)(address . 30540-done@debbugs.gnu.org)
20180220003044.GA6440@jasmine.lan
On Tue, Feb 20, 2018 at 12:06:45AM +0100, Andreas Enge wrote:
Toggle quote (9 lines)
> it looks like the glibc change when merging core-updates caused us to be
> bitten by a bug that is known on NixOS:
> https://github.com/NixOS/nixpkgs/issues/31762
>
> When I type "ssh whatever" (literally, or replacing "whatever" by a real
> server name), then the error message
> No user exists for uid 1000
> is printed and the ssh command is not executed.

The issue is that glibc 2.26 deprecated the "compat" query type of the
Name Service Switch.

We discussed this previously in https://bugs.gnu.org/30298.

One can adjust to the change by either using the nscd daemon [0] or
editing /etc/nsswitch.conf and replacing instances of 'compat' with
'files'.

On Debian Stretch, I found that `apt-get install nscd` was sufficient.

I'm going to merge this report with #30298.

[0] We already "strongly recommend" using nscd:
-----BEGIN PGP SIGNATURE-----

iQIzBAABCAAdFiEEsFFZSPHn08G5gDigJkb6MLrKfwgFAlqLbDEACgkQJkb6MLrK
fwhezRAApUxphQ435TyFoiIvSDmD1bL/sNR1b1uoitPdabbXjz0ZJGzoGf0lxdM9
SYbRFIUGm8MakS23BgMYn3d7avWCrkUM9arddMbcGeAUMkvV5QwydHtFXhGjXdHY
YZeLh9CAeIQ2Ce45YMHcy66jzLVjv8eiHcDpFWjpIZvrNq0TQucZEtxrxF/PRrRM
EnzNfDX0ireSZvGE4HtOyvLw+xZ3N9AtntO3iOgDpbt2ncKA+kh7bjUEsZ1OpxD+
HlhV0jVUjlLPsjuL/haW0rnNpu/Ygj1Spm5GKTxKn7bkffYCtjQ7lDgIt9BU9HHR
OzuiUYzy+c5H2MPqCsgeJdbNIqddC7hKUlUbq2wB7Vq/hwyl8OBWmvrL6QBy308p
IDwF9buPt6MbbAPqS2giFibmlYV/TKS8HTm94d6eT2mkcnHHfR4W8KXw9UbCcYwY
6WQEsUkhSFLANiPn9PoiF3nNePq/QV2qQkxBV3fMTEWbnVrLCh2x75YDAqkmptTl
lm6FHDWQGPjtJ1FQ0gRVY057eejCTWdB1A7xAeTDape1vKPn/NASrFC9EGxMVTEt
sxtB6VQfIkH3t30voljVX76ccH7dpAKuNn03QUszf39zNfqqkWgPgV93D4U+ok+w
nj1YpxEDAsz2O5Str3Za1q35LyEJOycFZdAIWqm0EOJoWyZ2CjE=
=cLBx
-----END PGP SIGNATURE-----


Closed
Leo Famulari wrote 7 years ago
(no subject)
(address . control@debbugs.gnu.org)
20180220003128.GA7037@jasmine.lan
merge 30540 30298
-----BEGIN PGP SIGNATURE-----
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=ejhM
-----END PGP SIGNATURE-----


Andreas Enge wrote 7 years ago
Re: bug#30540: ssh: No user exists for uid 1000
(name . Leo Famulari)(address . leo@famulari.name)(address . 30540-done@debbugs.gnu.org)
20180220100817.GA2345@jurong
Hello Leo,

On Mon, Feb 19, 2018 at 07:30:44PM -0500, Leo Famulari wrote:
Toggle quote (4 lines)
> We discussed this previously in https://bugs.gnu.org/30298.
> On Debian Stretch, I found that `apt-get install nscd` was sufficient.
> I'm going to merge this report with #30298.

thank you for your helpful reply and for merging the bugs. Indeed your
suggested solution works and, for the record, also fixed fetchmail, which
was affected as well.

Andreas
Closed
Leo Famulari wrote 7 years ago
(name . Andreas Enge)(address . andreas@enge.fr)(address . 30540-done@debbugs.gnu.org)
20180220115430.GB17373@jasmine.lan
On Tue, Feb 20, 2018 at 11:08:17AM +0100, Andreas Enge wrote:
Toggle quote (11 lines)
> Hello Leo,
>
> On Mon, Feb 19, 2018 at 07:30:44PM -0500, Leo Famulari wrote:
> > We discussed this previously in <https://bugs.gnu.org/30298>.
> > On Debian Stretch, I found that `apt-get install nscd` was sufficient.
> > I'm going to merge this report with #30298.
>
> thank you for your helpful reply and for merging the bugs. Indeed your
> suggested solution works and, for the record, also fixed fetchmail, which
> was affected as well.

Great!

I do wonder if we should configure glibc with --enable-obsolete-nsl,
which apparentely restores the old behavior, at least until deprecation
turns into removal. I guess it depends on how many complaints there are,
and how soon we can rebuild glibc.
-----BEGIN PGP SIGNATURE-----
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=xyEx
-----END PGP SIGNATURE-----


Closed
Andreas Enge wrote 7 years ago
(name . Leo Famulari)(address . leo@famulari.name)(address . 30540-done@debbugs.gnu.org)
20180220120810.GB14718@jurong
On Tue, Feb 20, 2018 at 06:54:30AM -0500, Leo Famulari wrote:
Toggle quote (5 lines)
> I do wonder if we should configure glibc with --enable-obsolete-nsl,
> which apparentely restores the old behavior, at least until deprecation
> turns into removal. I guess it depends on how many complaints there are,
> and how soon we can rebuild glibc.

Maybe an item in the release notes would be enough? In general I am in
favour of going forward and not enabling obsolete features.

Andreas
Closed
Leo Famulari wrote 7 years ago
(name . Andreas Enge)(address . andreas@enge.fr)(address . 30540-done@debbugs.gnu.org)
20180220125219.GB7573@jasmine.lan
On Tue, Feb 20, 2018 at 01:08:10PM +0100, Andreas Enge wrote:
Toggle quote (9 lines)
> On Tue, Feb 20, 2018 at 06:54:30AM -0500, Leo Famulari wrote:
> > I do wonder if we should configure glibc with --enable-obsolete-nsl,
> > which apparentely restores the old behavior, at least until deprecation
> > turns into removal. I guess it depends on how many complaints there are,
> > and how soon we can rebuild glibc.
>
> Maybe an item in the release notes would be enough? In general I am in
> favour of going forward and not enabling obsolete features.

I'm in favor of this choice, too.
-----BEGIN PGP SIGNATURE-----
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=ed5P
-----END PGP SIGNATURE-----


Closed
?
Your comment

This issue is archived.

To comment on this conversation send an email to 30540@debbugs.gnu.org

To respond to this issue using the mumi CLI, first switch to it
mumi current 30540
Then, you may apply the latest patchset in this issue (with sign off)
mumi am -- -s
Or, compose a reply to this issue
mumi compose
Or, send patches to this issue
mumi send-email *.patch
You may also tag this issue. See list of standard tags. For example, to set the confirmed and easy tags
mumi command -t +confirmed -t +easy
Or, remove the moreinfo tag and set the help tag
mumi command -t -moreinfo -t +help