Last modified: 2013-06-15 19:56:20 UTC

Wikimedia Bugzilla is closed!

Wikimedia migrated from Bugzilla to Phabricator. Bug reports are handled in Wikimedia Phabricator.
This static website is read-only and for historical purposes. It is not possible to log in and except for displaying bug reports and their history, links might be broken. See T37329, the corresponding Phabricator task for complete and up-to-date bug report information.
Bug 35329 - UID ranges for LDAP and system users overlap
UID ranges for LDAP and system users overlap
Status: RESOLVED INVALID
Product: Wikimedia Labs
Classification: Unclassified
General (Other open bugs)
unspecified
All All
: Low normal
: ---
Assigned To: Jeff Green
aklapper-moreinfo
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2012-03-19 19:02 UTC by Jeff Green
Modified: 2013-06-15 19:56 UTC (History)
4 users (show)

See Also:
Web browser: ---
Mobile Platform: ---
Assignee Huggle Beta Tester: ---


Attachments

Description Jeff Green 2012-03-19 19:02:22 UTC
Starting from a fresh instance, I tried to have puppet add a new system user 'pp' using this definition:

 user { "pp":
  name => "pp",
  home => "/opt/pp",
  comment => "pediapress system user",
  shell => "/bin/bash",
  ensure => "present",
  gid => "mwlib",
  allowdupe => false,
  system => true,
  managehome => true,
 }

The outcome was a user with uid 999, which conflicted with an ldap (assumed, not confirmed) user.

  drwxr-xr-x  2 grunny mwlib 4096 2012-03-19 15:52 pp

On Mark's suggestion I switched the manifest to use the systemuser class instead:

 systemuser { "pp": name => "pp", home => "/opt/pp", shell => "/bin/bash" }

This created a non-system user with UID 2191. The standard user range does
not appear to conflict with LDAP so with our broken systemuser class we would not have seen an issue before.

Mark fixed systemuser to system=>true in production, but we need to fix labs
host UID range configuration before importing that fix to the test repo.
Comment 1 jeremyb 2012-09-10 00:13:59 UTC
(In reply to comment #0)
> Mark fixed systemuser to system=>true in production, but we need to fix labs
> host UID range configuration before importing that fix to the test repo.

Obviously the test branch part is wrong because that branch is not used any more. (at all, by anyone)

Production currently has system => true.

FIXED ?
Comment 2 Peter Bena 2013-05-29 15:36:05 UTC
is this still a problem? this bug is open for several months
Comment 3 Peter Bena 2013-06-08 10:08:40 UTC
Jeff Green can you please confirm this needs a fix? otherwise I am closing this...
Comment 4 Peter Bena 2013-06-15 19:56:20 UTC
This bug is related to something what is not being used anymore, and nobody else seems to have this problem

Note You need to log in before you can comment on or make changes to this bug.


Navigation
Links