Package: debconf
Version: 1.5.61
Severity: normal
Tags: d-i

When installing and preseeding Debian Stretch with following:

user-setup-udeb passwd/shadow boolean true
d-i passwd/root-login  boolean false
d-i pkgsel/include string winbind krb5-user libpam-krb5 libnss-winbind 
libpam-winbind

And specify the local user with sudo privileges, after install can not login in 
with specified user during installation.

In /etc/passwd user is present. But password is not set correctly. The problem lies in that at setting user and password step, installer tries to set password for the user using krb5 like user is in domain, and is failing.

In result, despite the user exists locally and have sudo privileges, the password stored in system is not the one inserted at installation. And the root is disabled.

This problem is related with the line present in /etc/pam.d/common-*:
.. pam_krb5.so minimum_uid=1000

If minimum_uid could be specified at preseed time to something 10000 then local users uids will not interfer and setting password for local user will succeed.

Reply via email to