Author Topic: "Password incorrect" after fresh installation from package- alternative solution  (Read 1664 times)

ckiendl

  • Zen Apprentice
  • *
  • Posts: 6
  • Karma: +0/-0
    • View Profile
First of all, let me say that it is DECIDEDLY RIDICULOUS that a project that has "contribute" in huge letters on its homepage has no discernible way of transmitting information to the community without registering first.
Neither Redmine nor these forums nor the wiki allow for unregistered posting.
That's a rather stupid obstacle for contribution.

In addition, if you must force registration, you could at least go for a less incompetently designed user interface - it is decidedly not obvious that the huge input field directly below the CAPTCHA doesn't actually belong to the CAPTCHA.
Putting both CAPTCHA and the security question next to each other with a bit of whitespace would be a much better choice, but even a single, empty line would drastically improve the chances of noticing the VERY IMPORTANT text between CAPTCHA and input box.

-----------------------------------------------------------------------------------------------------------------------------------------------------------

That being said:

Dear fellow tormented individual, if you have installed Zentyal from packages according to the Installation Guide, if you have followed the advice to add your user to the sudo group, and you still get the "password incorrect" error despite everything being in order, check the group ownership of /etc/shadow (ls -ahl /etc/shadow).

The user ebox must be in the shadow group and the shadow group must have read access to /etc/shadow.
If /etc/shadow has an ownership of root:root rather than root:shadow, you will not be able to login.

You can correct the situation with chgrp shadow /etc/shadow. Also make sure that group has read permissions on that file. Permissions should be rw-r-- (-rw-r----- in long form), or 640 numerically.

If this doesn't help either, you can touch /etc/pam_debug to get debug output for the authentication procedure (to wherever your system has debug logging configured).

Dear developers: To tell the user his password is wrong when really you can't read the password database is bad design.
You should check and ideally fix the readability of /etc/shadow during the installation, and at least complain about lacking permissions during runtime.
Sending users on a wild goose chase and answering every occurrence of "password incorrect" after installation with "add to sudo" and then silence helps no one.
Not to mention that the leap "password incorrect" -> "add to sudo" isn't particularly obvious either. There should be better reporting on that as well.


Symptoms/keywords of this issue for future people's searches:
password incorrect
fresh installation
packages
unix_chkpwd[]: check pass; user unknown
unix_chkpwd[]: password check failed for user ()
uwsgi: pam_unix(zentyal:auth): authentication failure; logname= uid=113 euid=113 tty= ruser= rhost=  user=

------------------------------------------------------------------------------------------------------------------------------------

And since I'm here anyway: In the next step I can choose packages to be installed.
I did so. What did I get?
Quote
Some packages could not be installed. This may mean that you have
requested an impossible situation or if you are using the unstable
distribution that some required packages have not yet been created
or been moved out of Incoming.
The following information may help to resolve the situation:

The following packages have unmet dependencies:
zentyal-groupware : Depends: zentyal-mail but it is not going to be installed
Depends: zentyal-sogo but it is not going to be installed
For one: Why is that even possible? Why can the user even select an impossible scenario?
For two: How is that even possible? How are you calling the package manager to screw up something as anciently solid as apt's dependency installation?
Thirdly, why are there no further instructions? I can deal with this on my own, but a novice may have no idea how to solve this. Basically: What good is this information to someone who is not familiar with Linux package management?
And last but not least: Why is the OK button not working? Why am I stuck on a stupid error that shouldn't have occurred in the first place?

ckiendl

  • Zen Apprentice
  • *
  • Posts: 6
  • Karma: +0/-0
    • View Profile
I have partially deciphered the dependency issue.

Due to the failure to document that for package installation, the universe repository is required (to fix dependencies like libhtml-mason-perl), I had to enable that on my own yesterday.
Since I essentially improvised that on the fly, I hadn't enabled universe for xenial-updates and the like.
Adding universe everywhere fixes most of the dependency issues for package installation.

There are still collisions with gnupg, libgnutls-openssl27 and libgnutls30 (Depends: libgnutls30 (= 3.4.10-4ubuntu1.4) but 3.5.6-4 is to be installed.)

ckiendl

  • Zen Apprentice
  • *
  • Posts: 6
  • Karma: +0/-0
    • View Profile
In case anyone looks this up later: I "solved" the dependency issue by allowing the system to uninstall software-properties-common and ubuntu-server.
The former is responsible for conveniences like add-apt-repository, the latter is a metapackage for a specific set of server-software.

I can only hope this doesn't lead to apt "helpfully" uninstalling core software because it deems it an "unused dependency". We'll see.