perfsonar-user - [perfsonar-user] Minor issue: uids/gids chosen by installer
Subject: perfSONAR User Q&A and Other Discussion
List archive
- From: Brian Candler <>
- To: "" <>
- Subject: [perfsonar-user] Minor issue: uids/gids chosen by installer
- Date: Tue, 9 Oct 2018 17:12:06 +0100
- Domainkey-signature: a=rsa-sha1; c=nofws; d=pobox.com; h=to:from:subject :message-id:date:mime-version:content-type :content-transfer-encoding; q=dns; s=sasl; b=aTZamFZMxCqvEpGycjc yRvNLXvvRBWnA42TLDDddlfxUPK0W72e4kGyl4Ix6T1N2zfDUqWGNctLq+B2OZlh roqo0QWieUBjem3k5ARL9jJZ4QVAY3dHISG/X6GAGu4DYf8a8axcgMHn/3cHfHEm sVrmdlIX5/6HLjjXkqnCyccU=
- Ironport-phdr: 9a23:/HkQvBdieqorDawWlfoo7iYhlGMj4u6mDksu8pMizoh2WeGdxcu9YR7h7PlgxGXEQZ/co6odzbaO7Oa4ASQp2tWoiDg6aptCVhsI2409vjcLJ4q7M3D9N+PgdCcgHc5PBxdP9nC/NlVJSo6lPwWB6nK94iQPFRrhKAF7Ovr6GpLIj8Swyuu+54Dfbx9HiTahY75+Ngm6oRnMvcQKnIVuLbo8xAHUqXVSYeRWwm1oJVOXnxni48q74YBu/SdNtf8/7sBMSar1cbg2QrxeFzQmLns65Nb3uhnZTAuA/WUTX2MLmRdVGQfF7RX6XpDssivms+d2xSeXMdHqQb0yRD+v6bpgRh31hycdLzM37mHZhNFzgqxVrh2uqABwzYHPbYGJLfpzZL/Rcc8USGdDWMtaSixPApm7b4sKF+cMIPxYr4jnqFsIsBCzGxOjBOXyxT9MmHD2x7Ax3uM6Hg3cwAMvBdQOv2nQrNrrLqcfSvi1zK7TwjXEYPJawyvy6I/Nch04p/yHQLF+cdLJxEQuGA7JlEicpIPnMj+Py+gBr2uW4/BiWO6zk2IqqA58riKry8sykIXEiZwZxkrZ+Sh4wYs4I8CzRlRhbt6+CpRQsjmXN4toTcMmRGFloD46xaYftZ6geSgK1IwnywPFZ/yfdIiH+RXjVemLLThkg3Jlfaqzhxe08Ue+1u3xTsi53VlQoiZYndTBtGoB2wHP5sWEUPdw/Fut1S6K1w/J6+FEJU40lbDcK54k2rM/jYAfvljZES/whUr2iLGZdl8/9+iw7OToebLmp5CGO4BojQH+N7wimtajDuQgLggOQ2+b9Pyk1LL95035Tq5KjvowkqbDqpDWPNkbprWnDA9PyYsj7xe/Dyy60NQDg3ULNlNFeBSbj4f3IVHOJu73Deuhj1i2jjhk2u3GbfXdBcCHNnXZnqzme79nrlNHxRAbzNZD6ohSB61bZv//RwW54MTVFBEiNAq92aP6E9hn/oIYRW+VBKKFauXfvULetcw1JOzZTpUUsTC1APEj6/rjlzdtkxkWdK+l2ZYNQGi/FPN2ZU6eZCy/0Z86DW4Ws19mH6TRg1qYXGsLag==
I've just done some fresh installs with the 4.1.2 toolkit ISO.
I notice that pscheduler uses a non-system uid and gid of 1000:
pscheduler:x:1000:1000:pScheduler:/home/pscheduler:/bin/bash
Then, some other accounts are using system uids but non-system gids:
esmond:x:993:1001:Esmond User:/tmp:/sbin/nologin
perfsonar:x:991:1002:perfSONAR User:/tmp:/sbin/nologin
Plus, the pssudo group is a non-system gid:
pscheduler:x:1000:
esmond:x:1001:
perfsonar:x:1002:
pssudo:x:1003:
This means that my "regular" CentOS user (created during the ISO install) gets uid 1001 and gid 1004, which is messy.
In theory, system users should have uids and gids between 201 and 999. There is a flag to useradd for this:
-r, --system
Create a system account.
System users will be created with no aging information in
/etc/shadow, and their numeric identifiers are chosen in the
SYS_UID_MIN-SYS_UID_MAX range, defined in /etc/login.defs, instead
of UID_MIN-UID_MAX (and their GID counterparts for the creation of
groups).
Note that useradd will not create a home directory for such an
user, regardless of the default setting in /etc/login.defs
(CREATE_HOME). You have to specify the -m options if you want a
home directory for a system account to be created.
And also to groupadd:
-r, --system
Create a system group.
The numeric identifiers of new system groups are chosen in the
SYS_GID_MIN-SYS_GID_MAX range, defined in login.defs, instead of
GID_MIN-GID_MAX.
Is this behaviour because of the installer, or the way the rpm packages are built (e.g. is it post-install scripts creating the uids/gids)? Either way, would it be worth tweaking them to get more normal behaviour?
Regards,
Brian.
P.S. The regular user I created in the installer had the "administrator" box checked, and it ended up in group wheel, but not pssudo.
- [perfsonar-user] Minor issue: uids/gids chosen by installer, Brian Candler, 10/09/2018
- Re: [perfsonar-user] Minor issue: uids/gids chosen by installer, Mark Feit, 10/09/2018
- Re: [perfsonar-user] Minor issue: uids/gids chosen by installer, Brian Candler, 10/09/2018
- Re: [perfsonar-user] Minor issue: uids/gids chosen by installer, Mark Feit, 10/09/2018
Archive powered by MHonArc 2.6.19.