[opensuse-support] Leap 15.1 Problem creating new user

This machine was upgraded from Leap 15.0 to 15.1 during the beta testing phase. The upgrade was done by switching all the repos to the 15.1 version, followed by zypper dup. At that time, there were two users on the machine, both of whom continue to be able to login satisfactorily. I have tried to create a third user using the YaST module, and it appears to work, but the new user cannot login. When I enter the password and click Login, the password gets highlighted in blue, and the message 'Login failed' appears. When logged in as a working user, I cannot su to the new user: 09:41 bob@europa:~> su newuser Password: su: Authentication failure Although newuser's home gets created, it is missing some of the default directories, such as ~/Documents, ~/Pictures etc.: bob@europa:~> ls -alh /home/newuser total 40K drwxr-xr-x 7 sysadmin users 251 May 24 17:01 . drwxr-xr-x 5 root root 43 May 24 17:01 .. -rw------- 1 sysadmin users 0 May 18 1996 .bash_history -rw-r--r-- 1 sysadmin users 1.2K Apr 27 20:48 .bashrc drwxr-xr-x 2 sysadmin users 6 Mar 11 16:09 bin drwxr-xr-x 2 sysadmin users 21 Feb 22 18:32 .claws-mail drwx------ 2 sysadmin users 6 Mar 11 16:09 .config -rw-r--r-- 1 sysadmin users 1.6K Apr 9 2018 .emacs drwxr-xr-x 2 sysadmin users 6 Mar 11 16:09 .fonts -rw-r--r-- 1 sysadmin users 73 Jun 7 2018 .i18n -rw-r--r-- 1 sysadmin users 861 Apr 9 2018 .inputrc drwx------ 2 sysadmin users 6 Mar 11 16:09 .local -rw-r--r-- 1 sysadmin users 6.0K Dec 17 22:39 .muttrc -rw-r--r-- 1 sysadmin users 1.1K Apr 27 20:48 .profile -rw-r--r-- 1 sysadmin users 311 Dec 17 14:50 .urlview -rw-r--r-- 1 sysadmin users 2.0K Jun 7 2018 .xim.template -rwxr-xr-x 1 sysadmin users 1.1K Jan 18 08:41 .xinitrc.template Can anyone else confirm this behaviour? -- Bob

On Sat, 25 May 2019 11:59:05 +0200 "Carlos E. R." <robin.listas@telefonica.net> wrote:
Verified
2019-05-25T12:37:21.584169+01:00 europa su: The gnome keyring socket is not owned with the same credentials as the user login: /run/user/1000/keyring/control 2019-05-25T12:37:21.585214+01:00 europa su: gkr-pam: couldn't unlock the login keyring. I forgot to mention that the desktop is KDE Frameworks/plasma/whatever -- Bob

On 25/05/2019 13.44, Bob Williams wrote:
On Sat, 25 May 2019 11:59:05 +0200 "Carlos E. R." <> wrote:
...
I get many of those, so it should not be an issue.
I forgot to mention that the desktop is KDE Frameworks/plasma/whatever
Ah, then try with another desktop. Even better, try text mode login. ctrl-alt-f1. -- Cheers / Saludos, Carlos E. R. (from 15.0 x86_64 at Telcontar)

* Bob Williams <usenet@karmasailing.uk> [05-25-19 07:47]:
zypper -v rm -u gnome-keyring -- (paka)Patrick Shanahan Plainfield, Indiana, USA @ptilopteri http://en.opensuse.org openSUSE Community Member facebook/ptilopteri Registered Linux User #207535 @ http://linuxcounter.net Photos: http://wahoo.no-ip.org/piwigo paka @ IRCnet freenode -- To unsubscribe, e-mail: opensuse-support+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-support+owner@opensuse.org

On 25/05/2019 13.44, Bob Williams wrote:
Try this: rpm -q -a --queryformat "%{INSTALLTIME}\t%{INSTALLTIME:day} \ %{BUILDTIME:day} %-30{NAME}\t%15{VERSION}-%-7{RELEASE}\t%{arch} \ %25{VENDOR}%25{PACKAGER} == %{DISTRIBUTION} %{DISTTAG}\n" \ | sort | cut --fields="2-" | tee rpmlist \ | egrep -v "openSUSE\ Leap\ 15\.1|openSUSE_Leap_15\.1" | less -S It will list all packages that *might* not belong to 15.1. You will then have to consider the action: perhaps missing repo, remove, change repo... Also, run this: rpmconfigcheck The output will be like this, but much longer: Telcontar:~ # rpmconfigcheck Searching for unresolved configuration files Please check the following files (see /var/adm/rpmconfigcheck): /etc/apparmor.d/usr.lib.dovecot.auth.rpmnew /etc/apparmor.d/usr.lib.dovecot.config.rpmnew /etc/apparmor.d/usr.lib.dovecot.dovecot-lda.rpmnew /etc/apparmor.d/usr.sbin.smbd.rpmnew /etc/my.cnf.rpmnew /etc/pam.d/login.rpmnew /etc/postfix/main.cf.rpmnew /etc/postfix/master.cf.rpmnew /etc/pulse/client.conf.d/50-system.conf.rpmsave /etc/rsyslog.conf.rpmnew /etc/ssh/ssh_config.rpmnew /etc/ssh/sshd_config.rpmnew Telcontar:~ # You will have to review them. For example, as root, I would do: meld /etc/postfix/main.cf.rpmnew /etc/postfix/main.cf & and then decide what to do. .rpmnew is a new version of the file propossed by the rpm update process, while .rpmsave is the old version (the new was applied). Also, do "aa-logprof" and act on the results. -- Cheers / Saludos, Carlos E. R. (from 15.0 x86_64 at Telcontar)

On Sat, 25 May 2019 10:02:47 +0100 Bob Williams <usenet@karmasailing.uk> wrote:
What does it say in /var/log/btmp? Use `sudo last -f /var/log/btmp` to see.
Although newuser's home gets created, it is missing some of the default directories, such as ~/Documents, ~/Pictures etc.:
-- To unsubscribe, e-mail: opensuse-support+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-support+owner@opensuse.org

Bob Williams composed on 2019-05-25 10:02 (UTC+0100):
Although newuser's home gets created, it is missing some of the default directories, such as ~/Documents, ~/Pictures etc.:
I can't explain what went wrong. newuser's $HOME should have no files owned by sysadmin. What does 'ls -alhd /home/newuser/ report? 'sudo chown -R newuser.users /home/newuser' should fix all except the missing skel directories. Those root can copy from /etc/skel/ after ownership of /home/newuser is fixed. -- Evolution as taught in public schools is religion, not science. Team OS/2 ** Reg. Linux User #211409 ** a11y rocks! Felix Miata *** http://fm.no-ip.com/ -- To unsubscribe, e-mail: opensuse-support+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-support+owner@opensuse.org

Thank you Carlos, Patrick, Dave and Felix. The problem was a yubikey that I'd been playing with still being in the USB slot. Sorry for the noise. Anno Domini? Lack of coffee? Too much sun? Bob -- Bob Williams System: Linux 4.12.14-lp150.12.61-default Desktop: KDE Frameworks: 5.45.0, Qt: 5.9.4 and Plasma: 5.12.5

On 25/05/2019 17.07, Bob Williams wrote:
Why, what did it do? I'm curious.
Sorry for the noise. Anno Domini? Lack of coffee? Too much sun?
:-) -- Cheers / Saludos, Carlos E. R. (from 15.0 x86_64 at Telcontar)

On Sat, 25 May 2019 17:15:10 +0200 "Carlos E. R." <robin.listas@telefonica.net> wrote:
Two factor authorisation. The initial two users had been set up to require the presence of the yubikey to allow login. I hadn't completely disabled this setup when trying to add another user, though I thought I had. Bob -- Bob Williams System: Linux 4.12.14-lp150.12.61-default Desktop: KDE Frameworks: 5.45.0, Qt: 5.9.4 and Plasma: 5.12.5

On 26/05/2019 11.25, Bob Williams wrote:
And the yubikey impedes new users being created? I would understand that no yubikey plugged means no login, but it was the reverse that happened. -- Cheers / Saludos, Carlos E. R. (from 15.0 x86_64 at Telcontar)

On Sat, 25 May 2019 11:59:05 +0200 "Carlos E. R." <robin.listas@telefonica.net> wrote:
Verified
2019-05-25T12:37:21.584169+01:00 europa su: The gnome keyring socket is not owned with the same credentials as the user login: /run/user/1000/keyring/control 2019-05-25T12:37:21.585214+01:00 europa su: gkr-pam: couldn't unlock the login keyring. I forgot to mention that the desktop is KDE Frameworks/plasma/whatever -- Bob

On 25/05/2019 13.44, Bob Williams wrote:
On Sat, 25 May 2019 11:59:05 +0200 "Carlos E. R." <> wrote:
...
I get many of those, so it should not be an issue.
I forgot to mention that the desktop is KDE Frameworks/plasma/whatever
Ah, then try with another desktop. Even better, try text mode login. ctrl-alt-f1. -- Cheers / Saludos, Carlos E. R. (from 15.0 x86_64 at Telcontar)

* Bob Williams <usenet@karmasailing.uk> [05-25-19 07:47]:
zypper -v rm -u gnome-keyring -- (paka)Patrick Shanahan Plainfield, Indiana, USA @ptilopteri http://en.opensuse.org openSUSE Community Member facebook/ptilopteri Registered Linux User #207535 @ http://linuxcounter.net Photos: http://wahoo.no-ip.org/piwigo paka @ IRCnet freenode -- To unsubscribe, e-mail: opensuse-support+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-support+owner@opensuse.org

On 25/05/2019 13.44, Bob Williams wrote:
Try this: rpm -q -a --queryformat "%{INSTALLTIME}\t%{INSTALLTIME:day} \ %{BUILDTIME:day} %-30{NAME}\t%15{VERSION}-%-7{RELEASE}\t%{arch} \ %25{VENDOR}%25{PACKAGER} == %{DISTRIBUTION} %{DISTTAG}\n" \ | sort | cut --fields="2-" | tee rpmlist \ | egrep -v "openSUSE\ Leap\ 15\.1|openSUSE_Leap_15\.1" | less -S It will list all packages that *might* not belong to 15.1. You will then have to consider the action: perhaps missing repo, remove, change repo... Also, run this: rpmconfigcheck The output will be like this, but much longer: Telcontar:~ # rpmconfigcheck Searching for unresolved configuration files Please check the following files (see /var/adm/rpmconfigcheck): /etc/apparmor.d/usr.lib.dovecot.auth.rpmnew /etc/apparmor.d/usr.lib.dovecot.config.rpmnew /etc/apparmor.d/usr.lib.dovecot.dovecot-lda.rpmnew /etc/apparmor.d/usr.sbin.smbd.rpmnew /etc/my.cnf.rpmnew /etc/pam.d/login.rpmnew /etc/postfix/main.cf.rpmnew /etc/postfix/master.cf.rpmnew /etc/pulse/client.conf.d/50-system.conf.rpmsave /etc/rsyslog.conf.rpmnew /etc/ssh/ssh_config.rpmnew /etc/ssh/sshd_config.rpmnew Telcontar:~ # You will have to review them. For example, as root, I would do: meld /etc/postfix/main.cf.rpmnew /etc/postfix/main.cf & and then decide what to do. .rpmnew is a new version of the file propossed by the rpm update process, while .rpmsave is the old version (the new was applied). Also, do "aa-logprof" and act on the results. -- Cheers / Saludos, Carlos E. R. (from 15.0 x86_64 at Telcontar)

On Sat, 25 May 2019 10:02:47 +0100 Bob Williams <usenet@karmasailing.uk> wrote:
What does it say in /var/log/btmp? Use `sudo last -f /var/log/btmp` to see.
Although newuser's home gets created, it is missing some of the default directories, such as ~/Documents, ~/Pictures etc.:
-- To unsubscribe, e-mail: opensuse-support+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-support+owner@opensuse.org

Bob Williams composed on 2019-05-25 10:02 (UTC+0100):
Although newuser's home gets created, it is missing some of the default directories, such as ~/Documents, ~/Pictures etc.:
I can't explain what went wrong. newuser's $HOME should have no files owned by sysadmin. What does 'ls -alhd /home/newuser/ report? 'sudo chown -R newuser.users /home/newuser' should fix all except the missing skel directories. Those root can copy from /etc/skel/ after ownership of /home/newuser is fixed. -- Evolution as taught in public schools is religion, not science. Team OS/2 ** Reg. Linux User #211409 ** a11y rocks! Felix Miata *** http://fm.no-ip.com/ -- To unsubscribe, e-mail: opensuse-support+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-support+owner@opensuse.org

Thank you Carlos, Patrick, Dave and Felix. The problem was a yubikey that I'd been playing with still being in the USB slot. Sorry for the noise. Anno Domini? Lack of coffee? Too much sun? Bob -- Bob Williams System: Linux 4.12.14-lp150.12.61-default Desktop: KDE Frameworks: 5.45.0, Qt: 5.9.4 and Plasma: 5.12.5
participants (5)
-
Bob Williams
-
Carlos E. R.
-
Dave Howorth
-
Felix Miata
-
Patrick Shanahan