Re: Getting shadow into shape

2007-03-07 Thread Matthew Burgess
On Wednesday 07 March 2007 01:26, Bryan Kadzban wrote: > In fact GROUP won't be used at all, ever, in any configuration; the only > way with vanilla shadow-4.0.18.1 to get all your users in the same GID > is to provide that GID to the -g option. Thanks for the detailed analysis, Bryan. Aside fro

Re: Getting shadow into shape

2007-03-06 Thread Bryan Kadzban
Matthew Burgess wrote: > I observe the same behaviour with `useradd' from shadow-4.0.18.1 with > that patch applied. The patch fixes an error whereby the '-g' option > of useradd(8) and usermod(8) don't accept strings as their arguments. > I can't see how it would affect this behaviour we're obser

Re: Getting shadow into shape

2007-03-06 Thread Matthew Burgess
On Monday 05 March 2007 23:38, Bryan Kadzban wrote: > Matthew Burgess wrote: > > Do you know how useradd works if GROUP is commented out in the config > file? I'd assume it either gives you an error or creates a group with > the same name as the user, but I don't know for sure. See src/useradd.c:

Re: Getting shadow into shape

2007-03-06 Thread Torsten's News-Acoount
Hi. > 3) pld.org.pl is now returning an 'unknown host' error. Hunting around, > I've found ftp://ftp.pld-linux.org/software/shadow but that only has > shadow-4.0.3! http://www.mirrors.wiretapped.net/security/host-security/shadow/old/ has the file... > (for those of you not watching > at home

Re: Getting shadow into shape

2007-03-05 Thread Bryan Kadzban
Matthew Burgess wrote: > # Please be aware that Debian's adduser defaults to "user groups" > # which means that one group is created for each user > # There is no way to achieve this with useradd which must remains a low > # level utility > # GROUP=100 > > If I get some time I'll figure out just h

Re: Getting shadow into shape

2007-03-05 Thread Bruce Dubbs
Matthew Burgess wrote: > So, I'm thinking now of adding two new groups to LFS - mail=34 and users=100. > > Then, we'll use the `useradd -D' and `sed' commands above to change shadow's > defaults. Sounds sane to me. As a bonus, the users=100 setting goes logically with nobody=99. -- Bruce

Re: Getting shadow into shape

2007-03-05 Thread Matthew Burgess
On Monday 05 March 2007 01:43, Bruce Dubbs wrote: > Matthew Burgess wrote: > > Now, we can > > either install a 'users' group as GID 1000, or we can change the default > > in /etc/default/useradd to one of the GIDs in /etc/passwd. Personally, > > I'd prefer the former, as I can't see a suitable de

Re: Getting shadow into shape

2007-03-04 Thread Bryan Kadzban
Bruce Dubbs wrote: > My *real* preference would be for the system to automatically make a > new group with the same name as the user if -g is not specified and > use that. I think that's how RedHat does it. Same here: don't have one huge group for all users; give each user their own group. I *th

Re: Getting shadow into shape

2007-03-04 Thread Bruce Dubbs
Matthew Burgess wrote: > Hi folks. > > So, we've got a couple of issues with Shadow at the moment. > > 1) Consider the following command: > > root:/# useradd testuser > useradd: unknown GID 1000 > Group 'mail' not found. Creating the user mailbox file with 0600 mode. > > The first message is be

Getting shadow into shape

2007-03-04 Thread Matthew Burgess
Hi folks. So, we've got a couple of issues with Shadow at the moment. 1) Consider the following command: root:/# useradd testuser useradd: unknown GID 1000 Group 'mail' not found. Creating the user mailbox file with 0600 mode. The first message is because our /etc/default/useradd configuration