I've noticed that all accesses to svn+ssh stopped working after an update. It turned out that shell and home path of svn user were silently changed in /etc/passwd: === /mnt/btrfs/snaps/root-2024.04.05/etc # diff passwd /etc/passwd 19c19 < svn:x:1002:399:System user; svn:/home/svn:/bin/bash --- > svn:x:1002:399:System user; svn:/dev/null:/sbin/nologin === from /var/log/auth.log: === Apr 5 10:23:24 nedoserver usermod[20478]: change user 'svn' home from '/home/svn' to '/dev/null' Apr 5 10:23:24 nedoserver usermod[20478]: change user 'svn' shell from '/bin/bash' to '/sbin/nologin' === As a result, ~/.ssh/authorized_keys could not be found and svn+ssh authorization stopped working.
+1, I don't use SVN but I've had my gitea install and a few other servers broken like this. The silent part is especially bothersome. The mechanism ought to be sticky if an existing homedir is valid, or at least not change it from a valid value to a non-dir. Can we not use /var/empty/ for that at least?
Related bug: https://bugs.gentoo.org/819414
(In reply to Vadim from comment #2) > Related bug: https://bugs.gentoo.org/819414 The answer is essentially the same, too, although maybe we should document _HOME and such explicitly there on https://wiki.gentoo.org/wiki/Practical_guide_to_the_GLEP_81_migration.
So what would be the workaround for this case? In general, I still believe that neither acct-user/svn nor acct-user/git should blindly change (or actually set to default) appropriate user's path and shell *if* that user happened to already exist. When they are installed anew and no user existed before installation time it is OK though.
(In reply to Vadim from comment #4) > So what would be the workaround for this case? > > In general, I still believe that neither acct-user/svn nor acct-user/git > should blindly change (or actually set to default) appropriate user's path > and shell *if* that user happened to already exist. > > When they are installed anew and no user existed before installation time it > is OK though. See comment #3.
(In reply to Sam James from comment #3) > (In reply to Vadim from comment #2) > > Related bug: https://bugs.gentoo.org/819414 > > The answer is essentially the same, too, although maybe we should document > _HOME and such explicitly there on > https://wiki.gentoo.org/wiki/Practical_guide_to_the_GLEP_81_migration. I've added that now at https://wiki.gentoo.org/index.php?title=Practical_guide_to_the_GLEP_81_migration&diff=1297221&oldid=1266511.
