https://bugzilla.novell.com/show_bug.cgi?id=393722 Stephan Kulow changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |locilka@novell.com AssignedTo|bnc-team-screening@forge.provo.novell.com |jsuchome@novell.com Flag| |SHIP_STOPPER+ -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=393722 User coolo@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=393722#c3 Stephan Kulow changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |coolo@novell.com Status|NEEDINFO |NEW Info Provider|coolo@novell.com | --- Comment #3 from Stephan Kulow 2008-05-22 23:49:10 MST --- it should not be possible to create a system without non-root user (from a security point of view). So either: make it impossible to skip first stage user creation in automatic mode or ask in second stage even with AC. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=393722 User coolo@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=393722#c5 Stephan Kulow changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |security-team@suse.de --- Comment #5 from Stephan Kulow 2008-05-22 23:58:39 MST --- Looks like security team didn't notice before? I don't know, not my bug. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=393722 User jsuchome@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=393722#c7 Jiří­ Suchomel changed: What |Removed |Added ---------------------------------------------------------------------------- AssignedTo|jsuchome@novell.com |bnc-team-screening@forge.provo.novell.com Status|NEEDINFO |NEW Info Provider|coolo@novell.com | --- Comment #7 from Jiří­ Suchomel 2008-05-23 00:30:50 MST --- (In reply to comment #6 from Jiří­ Suchomel)

So, if something should be offered in 2nd stage: should it open inst_user or inst_auth client? I mean, should I ask directly for user creation or for authentication method (which may follow with user creation)?

I'd probably go with user dialog, since it would be backup solution anyway. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=393722 User jsuchome@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=393722#c8 --- Comment #8 from Jiří­ Suchomel 2008-05-23 01:02:34 MST --- Maybe even better would be other part of the proposal:

So either: make it impossible to skip first stage user creation in automatic mode

which I translate as "ask for confirmation if no user should be created in automatic mode". Current popup reserved for 2nd stage says: "Leaving the user name empty only makes sense in a network environment with an authentication server. Leave it empty?" And exactly this one could be used. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=393722 User locilka@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=393722#c10 --- Comment #10 from Lukas Ocilka 2008-05-23 01:59:19 MST --- (In reply to comment #9 from Jiří­ Suchomel)

Another part of this is, that even if I don't use Automatic Configuration, I do not get user's config in 2nd stage. Why is that? My understanding was that without Automatic Configuration checked, full 2nd stage should be run. -> Lukas?

Well, because first stage still disables it by default // First-stage users module will enable them again only if needed ProductControl::DisableModule ("root"); ProductControl::DisableModule ("user"); ProductControl::DisableModule ("auth"); This must be left from the previous version of first vs. second stage users. ----- I'll remove that piece of code and test it properly. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=393722 User jsuchome@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=393722#c12 --- Comment #12 from Jiří­ Suchomel 2008-05-23 02:06:34 MST --- (In reply to comment #10 from Lukas Ocilka)

Well, because first stage still disables it by default // First-stage users module will enable them again only if needed

It gets enabled in if needed, e.g. if network authentication is selected. Disabling by default is correct when automatic configuration is checked. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=393722 User locilka@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=393722#c14 --- Comment #14 from Lukas Ocilka 2008-05-23 02:22:59 MST --- Tested, now I know why it was there: If automatic installation is turned off, all second stage modules are enabled, which means also "root Password" and "Users" steps are visible. But after setting first-user and root-password in first stage, users/rootpass from first stage don't disable them. So it seems to be intentional that by default, they are disabled in second stage and users/rootpass in first stage should enable them only if needed. --- cut --- // First-stage users module will enable them again only if needed --- cut --- So I rather tend to move the part of that code back and have it done in users_first/root_first. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=393722 User locilka@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=393722#c16 --- Comment #16 from Lukas Ocilka 2008-05-23 02:42:35 MST --- Created an attachment (id=217706) --> (https://bugzilla.novell.com/attachment.cgi?id=217706) Logs First user created Root pass set --> reboot --> Asking for new root password (dialog should not be there at all, "Users" either) -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=393722 User locilka@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=393722#c18 --- Comment #18 from Lukas Ocilka 2008-05-23 02:49:34 MST --- Thanks, installation itself can't really handle that itself. It doesn't know whether to enable or disable these modules and when :( -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=393722 User locilka@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=393722#c20 --- Comment #20 from Lukas Ocilka 2008-05-23 04:18:42 MST --- (In reply to comment #19 from Jiří­ Suchomel)

1. users in 2nd stage: I will enable them only when Automatic Configuration is not set AND user was not configured in 1st stage.

Don't you need to call "users" to write the settings? Maybe "auth" is the one? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=393722 User jsuchome@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=393722#c22 --- Comment #22 from Jiří­ Suchomel 2008-05-23 08:32:35 MST --- Solution described in comment 19 is in yast2-users-2.16.33. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=393722 User jsuchome@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=393722#c24 Jiří­ Suchomel changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |RESOLVED Info Provider|lnussel@novell.com | Resolution| |FIXED --- Comment #24 from Jiří­ Suchomel 2008-05-26 00:17:14 MDT --- Than I assume it is fixed. Coolo, I tried to get info from you because you requested the feature and because you made some strong statements in this bug. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.