Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 275555 - sys-apps/shadow's chpasswd stopped working when USE=pam
Summary: sys-apps/shadow's chpasswd stopped working when USE=pam
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: [OLD] Core system (show other bugs)
Hardware: All Linux
: High normal (vote)
Assignee: PAM Gentoo Team (OBSOLETE)
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2009-06-26 23:15 UTC by Fernando (likewhoa)
Modified: 2010-10-12 18:40 UTC (History)
4 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments
Patch to include system-auth so chpasswd works (shadow-fix-chpasswd.patch,318 bytes, patch)
2009-08-09 02:00 UTC, Alex Maclean
Details | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description Fernando (likewhoa) 2009-06-26 23:15:20 UTC
Looks like a recent update to shadow broke chpasswd.

Reproducible: Always

Steps to Reproduce:
1. emerge =sys-apps/shadow4.1.4.1
2. su -
3. echo "root:gentoo" | chpasswd


Actual Results:  
nothing

Expected Results:  
root password changed to gentoo
Comment 1 SpanKY gentoo-dev 2009-06-28 05:11:55 UTC
you need to provide `emerge --info` with every report just like the bug summary and documentation says to

chpasswd works just fine for me

what exactly is the exit status of chpasswd after you run it ?
Comment 2 Fernando (likewhoa) 2009-06-28 06:18:05 UTC
Portage 2.1.6.13 (default/linux/x86/2008.0, gcc-4.3.3, glibc-2.9_p20081201-r2, 2.6.29 x86_64)
=================================================================                                 
System uname: Linux-2.6.29-x86_64-Dual_Core_AMD_Opteron-tm-_Processor_165-with-gentoo-2.0.1  
Timestamp of tree: Sun, 28 Jun 2009 02:30:01 +0000                                                
app-shells/bash:     4.0_p24                                                                      
dev-lang/python:     2.5.4-r2, 2.6.2-r1                                                           
sys-apps/baselayout: 2.0.1                                                                        
sys-apps/openrc:     9999                                                                         
sys-apps/sandbox:    2.0                                                                          
sys-devel/autoconf:  2.63-r1                                                                      
sys-devel/automake:  1.10.2, 1.11                                                                 
sys-devel/binutils:  2.19.51.0.10                                                                 
sys-devel/gcc-config: 1.4.1                                                                       
sys-devel/libtool:   2.2.6a                                                                       
virtual/os-headers:  2.6.29                                                                       
ACCEPT_KEYWORDS="x86 ~x86"                                                                        
CBUILD="i486-pc-linux-gnu"                                                                        
CFLAGS="-Os -march=i486 -pipe"                                                                    
CHOST="i486-pc-linux-gnu"                                                                         
CONFIG_PROTECT="/etc /usr/share/config"                                                           
CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/env.d /etc/env.d/java/ /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/php/apache2-php5/ext-active/ /etc/php/cgi-php5/ext-active/ /etc/php/cli-php5/ext-active/ /etc/revdep-rebuild /etc/sandbox.d /etc/terminfo /etc/udev/rules.d"                                                           
CXXFLAGS="-Os -march=i486 -pipe"                                                                                    
DISTDIR="/usr/portage/distfiles"                                                                                    
EMERGE_DEFAULT_OPTS=""                                                                                              
FEATURES="candy distlocks fixpackages parallel-fetch protect-owned sandbox sfperms strict unmerge-orphans userfetch userpriv usersandbox"                                                                                               
GENTOO_MIRRORS="http://gentoo.mirrors.tds.net/gentoo http://gentoo.arcticnetwork.ca http://gd.tuwien.ac.at/opsys/linux/gentoo http://ftp-stud.fht-esslingen.de/pub/Mirrors/gentoo"                                                      
LDFLAGS="-Wl,-O1 -Wl,--sort-common -Wl,--warn-once,--hash-style=gnu"                                                
LINGUAS="en"                                                                                                        
MAKEOPTS="-j3"
PKGDIR="/usr/portage/packages"
PORTAGE_CONFIGROOT="/"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --stats --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
SYNC="rsync://rsync.gentoo.org/gentoo-portage"
USE="acl bash-completion bzip2 cdroot cli cracklib crypt cups cvs dri fortran gdbm git gpm iconv ipv6 isdnlog livecd midi minimal mmx mudflap ncurses nls nptl nptlonly openmp openntpd pam pcre perl pppd python readline reflection session spl sse sse2 ssl subversion sysfs threads unicode userlocales x86 xorg zlib" ALSA_CARDS="ali5451 als4000 atiixp atiixp-modem bt87x ca0106 cmipci emu10k1 emu10k1x ens1370 ens1371 es1938 es1968 fm801 hda-intel intel8x0 intel8x0m maestro3 trident usb-audio via82xx via82xx-modem ymfpci" ALSA_PCM_PLUGINS="adpcm alaw asym copy dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mmap_emul mulaw multi null plug rate route share shm softvol" APACHE2_MODULES="actions alias auth_basic authn_alias authn_anon authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" ELIBC="glibc" INPUT_DEVICES="keyboard mouse evdev" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LINGUAS="en" USERLAND="GNU" VIDEO_CARDS="fbdev glint i810 intel mach64 mga neomagic nv r128 radeon savage sis tdfx trident vesa vga via vmware voodoo"
Unset:  CPPFLAGS, CTARGET, FFLAGS, INSTALL_MASK, LANG, LC_ALL, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS, PORTDIR_OVERLAY

Sorry been a while since I posted a bug and forgot to leave 'emerge --info' output, anyways the exit status is 0 as shown below.

# echo "root:gentoo"|chpasswd;echo $?
0
# su gentoo
gentoo@localhost / $ su -
Password:
su: Authentication failure
gentoo@localhost / $ groups
wheel gentoo
Comment 3 SpanKY gentoo-dev 2009-06-28 17:06:23 UTC
seems to work fine with USE=-pam (which is what i use)
Comment 4 Diego Elio Pettenò (RETIRED) gentoo-dev 2009-06-28 17:32:01 UTC
I can confirm indeed that chpasswd becomes a no-op when you enable pam. But it doesn't seem like it's working as it's supposed to, to me.
Comment 5 Alex Maclean 2009-07-26 00:42:35 UTC
chpasswd is working correctly. However, /etc/pam.d/chpasswd is misconfigured to use pam_permit.so. Perhaps it should include system-auth instead.
Comment 6 Alex Maclean 2009-08-09 02:00:13 UTC
Created attachment 200651 [details, diff]
Patch to include system-auth so chpasswd works
Comment 7 Adam Randall 2010-07-12 18:06:27 UTC
My x86 systems upgraded from sys-apps/shadow-4.1.2.2 to sys-apps/shadow-4.1.4.2-r3 (then to 4.1.4.2-r4). With this change chpasswd stopped working. The patch above did not work, since it was in the /etc/pam.d/shadow file. Changing the /etc/pam.d/chpasswd to have the same change as Alex's patch seems to fix it for me.

As I am not fluent in PAM, I wonder if this is a safe change or not.
Comment 8 Diego Elio Pettenò (RETIRED) gentoo-dev 2010-07-23 13:25:23 UTC
Comment on attachment 200651 [details, diff]
Patch to include system-auth so chpasswd works

Patch is wrong, but will fix it in a moment
Comment 9 Diego Elio Pettenò (RETIRED) gentoo-dev 2010-07-23 13:53:06 UTC
Okay should be fixed in -r5: passwd, chpasswd and chgpasswd now all install the same configuration file.
Comment 10 Gustavo A. Díaz 2010-10-12 17:45:18 UTC
Guys,

I don't know if this related or not, but actually I can't execute it with the param -m:

chpasswd: invalid option -- 'm' (actually being used for quickstart)

I've upgraded to -r5 and the problem exist (or still exist).

Comment 11 SpanKY gentoo-dev 2010-10-12 18:40:36 UTC
do not go spamming unrelated issues to multiple bugs.  these reports have nothing to do with the "-m" option.  if you have a *new* problem, you file a *new* bug.