GNU bug report logs - #35806
Login passwords incorrect on some newly installed 1.0.1 systems

Previous Next

To add a comment to this bug, you must first unarchive it, by sending
a message to control AT debbugs.gnu.org, with unarchive 35806 in the body.
You can then email your comments to 35806 AT debbugs.gnu.org in the normal way.

Toggle the display of automated, internal messages from the tracker.

Message #5 received at submit <at> debbugs.gnu.org (full text, mbox):

From: "pelzflorian (Florian Pelz)" <pelzflorian <at> pelzflorian.de>
To: bug-guix <at> gnu.org
Subject: Login passwords incorrect on some newly installed 1.0.1 systems
Date: Mon, 20 May 2019 11:38:55 +0200

Login fails with

Login incorrect

on a system newly installed from the 1.0.1 ISO image — on only some
reinstalls.  Maybe it was my fault, but maybe not, it is kind of
spooky.  Can others reproduce?

The first time the password was correctly set to x in /etc/passwd and
in /etc/shadow the line looked normal.  Maybe I made a typo when
setting up the password?

I tried to reproduce with a less sensitive password “y” for root and I
believe an empty user password or maybe “y” too; now I got no user
entry in /etc/passwd and /etc/shadow but can log in as root.

This was the content of /etc/passwd:

root:x:0:0::/root:/gnu/store/qn1ax1fkj16x280m1rv7mcimfmn9l2pf-bash-4.4.23/bin/bash
nobody:x:65534:997::/nonexistent:/gnu/store/dl8k19fivmv181d81lpn1nadsf219ky8-shadow-4.6/sbin/nologin
guixbuilder01:x:999:30000:Guix Build User  1:/var/empty:/gnu/store/dl8k19fivmv181d81lpn1nadsf219ky8-shadow-4.6/sbin/nologin
guixbuilder02:x:998:30000:Guix Build User  2:/var/empty:/gnu/store/dl8k19fivmv181d81lpn1nadsf219ky8-shadow-4.6/sbin/nologin
guixbuilder03:x:997:30000:Guix Build User  3:/var/empty:/gnu/store/dl8k19fivmv181d81lpn1nadsf219ky8-shadow-4.6/sbin/nologin
guixbuilder04:x:996:30000:Guix Build User  4:/var/empty:/gnu/store/dl8k19fivmv181d81lpn1nadsf219ky8-shadow-4.6/sbin/nologin
guixbuilder05:x:995:30000:Guix Build User  5:/var/empty:/gnu/store/dl8k19fivmv181d81lpn1nadsf219ky8-shadow-4.6/sbin/nologin
guixbuilder06:x:994:30000:Guix Build User  6:/var/empty:/gnu/store/dl8k19fivmv181d81lpn1nadsf219ky8-shadow-4.6/sbin/nologin
guixbuilder07:x:993:30000:Guix Build User  7:/var/empty:/gnu/store/dl8k19fivmv181d81lpn1nadsf219ky8-shadow-4.6/sbin/nologin
guixbuilder08:x:992:30000:Guix Build User  8:/var/empty:/gnu/store/dl8k19fivmv181d81lpn1nadsf219ky8-shadow-4.6/sbin/nologin
guixbuilder09:x:991:30000:Guix Build User  9:/var/empty:/gnu/store/dl8k19fivmv181d81lpn1nadsf219ky8-shadow-4.6/sbin/nologin
guixbuilder10:x:990:30000:Guix Build User 10:/var/empty:/gnu/store/dl8k19fivmv181d81lpn1nadsf219ky8-shadow-4.6/sbin/nologin
messagebus:x:989:983:D-Bus system bus user:/var/run/dbus:/gnu/store/dl8k19fivmv181d81lpn1nadsf219ky8-shadow-4.6/sbin/nologin
polkitd:x:988:982:Polkit daemon user:/var/empty:/run/current-system/profile/sbin/nologin

The content of /etc/shadow was

root:$6$vWBy92HZjt$P.g83qzyyuZ0AebfKjsS/gZV.1SlaMkUqsmsO9cP1yXtpsCIE.9gDNDtMVwZWa..wmvVNqjqgjg7OFhKadshF.:18036::::::
nobody:!:18036::::::
guixbuilder01:!:18036::::::
guixbuilder02:!:18036::::::
guixbuilder03:!:18036::::::
guixbuilder04:!:18036::::::
guixbuilder05:!:18036::::::
guixbuilder06:!:18036::::::
guixbuilder07:!:18036::::::
guixbuilder08:!:18036::::::
guixbuilder09:!:18036::::::
guixbuilder10:!:18036::::::
messagebus:!:18036::::::
polkitd:!:18036::::::

Maybe I turned off my computer at the wrong time when booting into the
installed system?  But the passwords get set up before the first boot,
don’t they?  I reinstalled again since then.  Now it works.

Regards,
Florian

Message #8 received at 35806 <at> debbugs.gnu.org (full text, mbox):

From: Ludovic Courtès <ludo <at> gnu.org>
To: "pelzflorian \(Florian Pelz\)" <pelzflorian <at> pelzflorian.de>
Cc: 35806 <at> debbugs.gnu.org
Subject: Re: bug#35806: Login passwords incorrect on some newly installed
 1.0.1 systems
Date: Mon, 20 May 2019 17:01:40 +0200

[Message part 1 (text/plain, inline)]

Hi!

"pelzflorian (Florian Pelz)" <pelzflorian <at> pelzflorian.de> skribis:

> on a system newly installed from the 1.0.1 ISO image — on only some
> reinstalls.  Maybe it was my fault, but maybe not, it is kind of
> spooky.  Can others reproduce?

No.  (I did many installs in VMs before the release…  :-))

Note that you can check by doing an install in a VM using the attached
script.

> The content of /etc/shadow was
>
> root:$6$vWBy92HZjt$P.g83qzyyuZ0AebfKjsS/gZV.1SlaMkUqsmsO9cP1yXtpsCIE.9gDNDtMVwZWa..wmvVNqjqgjg7OFhKadshF.:18036::::::

So a password was set, as expected.  Maybe you tried the wrong password,
or with the wrong keyboard layout?

Thanks,
Ludo’.

[test-install.sh (text/plain, inline)]

#!/bin/sh
set -e
set -x
ISO="$(./pre-inst-env guix system disk-image --file-system-type=iso9660 gnu/system/install.scm)"
qemu-img create -f qcow2  /tmp/t.img 10G

#EFI_OPTS="-bios $(guix build ovmf)/share/firmware/ovmf_x64.bin"

exec qemu-system-x86_64 -enable-kvm -hda /tmp/t.img -cdrom "$ISO" -m 1024 -boot d -net user -net nic,model=virtio -no-reboot $EFI_OPTS

Message #11 received at 35806 <at> debbugs.gnu.org (full text, mbox):

From: "pelzflorian (Florian Pelz)" <pelzflorian <at> pelzflorian.de>
To: Ludovic Courtès <ludo <at> gnu.org>
Cc: 35806 <at> debbugs.gnu.org
Subject: Re: bug#35806: Login passwords incorrect on some newly installed
 1.0.1 systems
Date: Mon, 20 May 2019 22:02:51 +0200

[Message part 1 (text/plain, inline)]

On Mon, May 20, 2019 at 05:01:40PM +0200, Ludovic Courtès wrote:
> Hi!
> 
> "pelzflorian (Florian Pelz)" <pelzflorian <at> pelzflorian.de> skribis:
> 
> > on a system newly installed from the 1.0.1 ISO image — on only some
> > reinstalls.  Maybe it was my fault, but maybe not, it is kind of
> > spooky.  Can others reproduce?
> 
> No.  (I did many installs in VMs before the release…  :-))

OK.  I consider it likely that a typo was the reason for the wrong
password on the first install.

However, the second install had no normal user account, as you can see
in my /etc/shadow (which is attached again).  It should not have been
possible to install without user account.  Now that I think about it,
I believe when I got shown the user account creation page in the
installer, I accidentally immediately pressed some key (maybe Enter)
and it threw me back to the locale selection.  I configured everything
again, but I believe this was the reason no user account was created.

I could now make the user account creation page crash again by
entering a wrong password confirmation, but after going through the
installer again, the resulting config contains a user and I can login.
I do not know how I managed to break this.

> 
> Note that you can check by doing an install in a VM using the attached
> script.
>

Thank you.  For now I’ll try on real hardware though.

Regards,
Florian

[shadow (text/plain, attachment)]

Message #14 received at 35806 <at> debbugs.gnu.org (full text, mbox):

From: Ludovic Courtès <ludo <at> gnu.org>
To: "pelzflorian \(Florian Pelz\)" <pelzflorian <at> pelzflorian.de>
Cc: 35806 <at> debbugs.gnu.org
Subject: Re: bug#35806: Login passwords incorrect on some newly installed
 1.0.1 systems
Date: Mon, 20 May 2019 22:36:32 +0200

Hi,

"pelzflorian (Florian Pelz)" <pelzflorian <at> pelzflorian.de> skribis:

> However, the second install had no normal user account, as you can see
> in my /etc/shadow (which is attached again).  It should not have been
> possible to install without user account.  Now that I think about it,
> I believe when I got shown the user account creation page in the
> installer, I accidentally immediately pressed some key (maybe Enter)
> and it threw me back to the locale selection.  I configured everything
> again, but I believe this was the reason no user account was created.
>
> I could now make the user account creation page crash again by
> entering a wrong password confirmation, but after going through the
> installer again, the resulting config contains a user and I can login.
> I do not know how I managed to break this.

Could you file a bug specifically for this one if you managed to
reproduce it?

>> Note that you can check by doing an install in a VM using the attached
>> script.
>>
>
> Thank you.  For now I’ll try on real hardware though.

Well that’s even better.  :-)

Should we consider this bug closed?

Thanks,
Ludo’.

Message #17 received at 35806 <at> debbugs.gnu.org (full text, mbox):

From: "pelzflorian (Florian Pelz)" <pelzflorian <at> pelzflorian.de>
To: Ludovic Courtès <ludo <at> gnu.org>
Cc: 35806 <at> debbugs.gnu.org
Subject: Re: bug#35806: Login passwords incorrect on some newly installed
 1.0.1 systems
Date: Mon, 20 May 2019 22:41:33 +0200

On Mon, May 20, 2019 at 10:36:32PM +0200, Ludovic Courtès wrote:
> Hi,
> 
> "pelzflorian (Florian Pelz)" <pelzflorian <at> pelzflorian.de> skribis:
> 
> > However, the second install had no normal user account, as you can see
> > in my /etc/shadow (which is attached again).  It should not have been
> > possible to install without user account.  Now that I think about it,
> > I believe when I got shown the user account creation page in the
> > installer, I accidentally immediately pressed some key (maybe Enter)
> > and it threw me back to the locale selection.  I configured everything
> > again, but I believe this was the reason no user account was created.
> >
> > I could now make the user account creation page crash again by
> > entering a wrong password confirmation, but after going through the
> > installer again, the resulting config contains a user and I can login.
> > I do not know how I managed to break this.
> 
> Could you file a bug specifically for this one if you managed to
> reproduce it?
>

I will try and then file a more specific bug.

> >> Note that you can check by doing an install in a VM using the attached
> >> script.
> >>
> >
> > Thank you.  For now I’ll try on real hardware though.
> 
> Well that’s even better.  :-)
> 
> Should we consider this bug closed?
> 

Yes.

Regards,
Florian

Message #24 received at 35806-done <at> debbugs.gnu.org (full text, mbox):

From: Andreas Enge <andreas <at> enge.fr>
To: "pelzflorian (Florian Pelz)" <pelzflorian <at> pelzflorian.de>
Cc: Ludovic Courtès <ludo <at> gnu.org>,
 35806-done <at> debbugs.gnu.org
Subject: Re: bug#35806: Login passwords incorrect on some newly installed
 1.0.1 systems
Date: Mon, 27 May 2019 12:03:42 +0200

So closing it by cc-ing 35806-done <at> debbugs.gnu.org.

Andreas

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.