diff options
author | Christian Breunig <christian@breunig.cc> | 2023-10-04 16:45:13 +0200 |
---|---|---|
committer | Christian Breunig <christian@breunig.cc> | 2023-10-04 16:45:13 +0200 |
commit | 12069d5653034b46a47430353c3867b3678c196f (patch) | |
tree | 8e8b9ee4c6eefcef866ab00c1a434a428df147ec /data/templates/ssh | |
parent | 53bc1627c09d7b6559aaafabfac69a7427e8e38c (diff) | |
download | vyos-1x-12069d5653034b46a47430353c3867b3678c196f.tar.gz vyos-1x-12069d5653034b46a47430353c3867b3678c196f.zip |
login: T5521: do not call system-login.py in vyos-router init
Calling system-login.py with no mounted VyOS config has the negative effect
that the script will not detect any local useraccounts and thus assumes they
all need to be removed from the password backend.
As soon as the VyOS configuration is mounted and the CLI content is processed,
system-login.py get's invoked and re-creates the before deleted user accounts.
As the account names are sorted in alphabetical order, the name <-> UID mapping
can get mixed up during system reboot.
The intention behind calling system-login.py from vyos-router init was to
reset system services (PAM, NSS) back to sane defaults with the defaults
provided via system-login.py. As PAM is already reset in vyos-router startup
script, /etc/nsswitch.conf was the only candidate left.
This is now accomplished by simply creating a standard NSS configuration file
tailored for local system accounts.
This is the second revision after the first change via commit 64d32329958
("login: T5521: home directory owner changed during reboot") got reverted.
Diffstat (limited to 'data/templates/ssh')
0 files changed, 0 insertions, 0 deletions