GNU bug report logs - #30540
ssh: No user exists for uid 1000

Previous Next

To add a comment to this bug, you must first unarchive it, by sending
a message to control AT debbugs.gnu.org, with unarchive 30540 in the body.
You can then email your comments to 30540 AT debbugs.gnu.org in the normal way.

Toggle the display of automated, internal messages from the tracker.

Message #5 received at submit <at> debbugs.gnu.org (full text, mbox):

From: Andreas Enge <andreas <at> enge.fr>
To: bug-guix <at> gnu.org
Subject: ssh: No user exists for uid 1000
Date: Tue, 20 Feb 2018 00:06:45 +0100

Hello,

it looks like the glibc change when merging core-updates caused us to be
bitten by a bug that is known on NixOS:
   https://github.com/NixOS/nixpkgs/issues/31762

When I type "ssh whatever" (literally, or replacing "whatever" by a real
server name), then the error message
   No user exists for uid 1000
is printed and the ssh command is not executed.

I am using guix on top of debian.

Andreas

Message #10 received at 30540-done <at> debbugs.gnu.org (full text, mbox):

From: Leo Famulari <leo <at> famulari.name>
To: Andreas Enge <andreas <at> enge.fr>
Cc: 30540-done <at> debbugs.gnu.org
Subject: Re: bug#30540: ssh: No user exists for uid 1000
Date: Mon, 19 Feb 2018 19:30:44 -0500

[Message part 1 (text/plain, inline)]

On Tue, Feb 20, 2018 at 12:06:45AM +0100, Andreas Enge wrote:
> it looks like the glibc change when merging core-updates caused us to be
> bitten by a bug that is known on NixOS:
>    https://github.com/NixOS/nixpkgs/issues/31762
> 
> When I type "ssh whatever" (literally, or replacing "whatever" by a real
> server name), then the error message
>    No user exists for uid 1000
> is printed and the ssh command is not executed.

The issue is that glibc 2.26 deprecated the "compat" query type of the
Name Service Switch.

We discussed this previously in <https://bugs.gnu.org/30298>.

One can adjust to the change by either using the nscd daemon [0] or
editing /etc/nsswitch.conf and replacing instances of 'compat' with
'files'.

On Debian Stretch, I found that `apt-get install nscd` was sufficient.

I'm going to merge this report with #30298.

[0] We already "strongly recommend" using nscd:
https://www.gnu.org/software/guix/manual/html_node/Application-Setup.html#Name-Service-Switch-1

[signature.asc (application/pgp-signature, inline)]

Message #15 received at 30540-done <at> debbugs.gnu.org (full text, mbox):

From: Andreas Enge <andreas <at> enge.fr>
To: Leo Famulari <leo <at> famulari.name>
Cc: 30540-done <at> debbugs.gnu.org
Subject: Re: bug#30540: ssh: No user exists for uid 1000
Date: Tue, 20 Feb 2018 11:08:17 +0100

Hello Leo,

On Mon, Feb 19, 2018 at 07:30:44PM -0500, Leo Famulari wrote:
> We discussed this previously in <https://bugs.gnu.org/30298>.
> On Debian Stretch, I found that `apt-get install nscd` was sufficient.
> I'm going to merge this report with #30298.

thank you for your helpful reply and for merging the bugs. Indeed your
suggested solution works and, for the record, also fixed fetchmail, which
was affected as well.

Andreas

Message #18 received at 30540-done <at> debbugs.gnu.org (full text, mbox):

From: Leo Famulari <leo <at> famulari.name>
To: Andreas Enge <andreas <at> enge.fr>
Cc: 30540-done <at> debbugs.gnu.org
Subject: Re: bug#30540: ssh: No user exists for uid 1000
Date: Tue, 20 Feb 2018 06:54:30 -0500

[Message part 1 (text/plain, inline)]

On Tue, Feb 20, 2018 at 11:08:17AM +0100, Andreas Enge wrote:
> Hello Leo,
> 
> On Mon, Feb 19, 2018 at 07:30:44PM -0500, Leo Famulari wrote:
> > We discussed this previously in <https://bugs.gnu.org/30298>.
> > On Debian Stretch, I found that `apt-get install nscd` was sufficient.
> > I'm going to merge this report with #30298.
> 
> thank you for your helpful reply and for merging the bugs. Indeed your
> suggested solution works and, for the record, also fixed fetchmail, which
> was affected as well.

Great!

I do wonder if we should configure glibc with --enable-obsolete-nsl,
which apparentely restores the old behavior, at least until deprecation
turns into removal. I guess it depends on how many complaints there are,
and how soon we can rebuild glibc.

[signature.asc (application/pgp-signature, inline)]

Message #21 received at 30540-done <at> debbugs.gnu.org (full text, mbox):

From: Andreas Enge <andreas <at> enge.fr>
To: Leo Famulari <leo <at> famulari.name>
Cc: 30540-done <at> debbugs.gnu.org
Subject: Re: bug#30540: ssh: No user exists for uid 1000
Date: Tue, 20 Feb 2018 13:08:10 +0100

On Tue, Feb 20, 2018 at 06:54:30AM -0500, Leo Famulari wrote:
> I do wonder if we should configure glibc with --enable-obsolete-nsl,
> which apparentely restores the old behavior, at least until deprecation
> turns into removal. I guess it depends on how many complaints there are,
> and how soon we can rebuild glibc.

Maybe an item in the release notes would be enough? In general I am in
favour of going forward and not enabling obsolete features.

Andreas

Message #24 received at 30540-done <at> debbugs.gnu.org (full text, mbox):

From: Leo Famulari <leo <at> famulari.name>
To: Andreas Enge <andreas <at> enge.fr>
Cc: 30540-done <at> debbugs.gnu.org
Subject: Re: bug#30540: ssh: No user exists for uid 1000
Date: Tue, 20 Feb 2018 07:52:19 -0500

[Message part 1 (text/plain, inline)]

On Tue, Feb 20, 2018 at 01:08:10PM +0100, Andreas Enge wrote:
> On Tue, Feb 20, 2018 at 06:54:30AM -0500, Leo Famulari wrote:
> > I do wonder if we should configure glibc with --enable-obsolete-nsl,
> > which apparentely restores the old behavior, at least until deprecation
> > turns into removal. I guess it depends on how many complaints there are,
> > and how soon we can rebuild glibc.
> 
> Maybe an item in the release notes would be enough? In general I am in
> favour of going forward and not enabling obsolete features.

I'm in favor of this choice, too.

[signature.asc (application/pgp-signature, inline)]

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.