passwd (not) updated successfully

[hiro]

First time I'm trying out dcore, wondering...

root@box:~# passwd
passwd: password updated successfully

root@box:~# ls -l `which passwd`
lrwxrwxrwx 1 root root 41 Aug 26 00:39 /usr/bin/passwd -> /tmp/tcloop/openssh-server/usr/bin/passwd

Would you also use that huge openssh package with all those dependencies from debian, or is there a way to easily use the extensions from tc6 repo if they are preferred?

[hiro]

There are also other problems. Sometimes I get segfaults when passwords get queried.

[Jason W]

Busybox passwd has the features dCore needs, so for now I can remove the passwd command from being installed from Debian.  I will work on finding the issue in the passwd package.

I import and use the ssh package from Debian.  For things that the Debian versions either are not available or do not work, we keep a prebuilt section.  We can't mix the tcz repo alongside our prebuilt or Debian repo packages. 

[hiro]

removing debian password sounds like the right thing to me, yeah.
i'm curious whether i'm really the only one who experienced these problems due to fear of having done something wrong...

[Jason W]

We use our own startup scripts to deal with problems that the native script does not take care of.  Or, we can upload a prebuilt version of the package, or delete/add files.  Thanks for testing, the more folks that use dCore the more issues and solutions we will find.

[hiro]

I haven't upgraded yet, so I'm not sure if you fixed it already. Either way I would really like to understand what's going on.
When I run su the one being used is /tmp/tcloop/openssh-server/bin/su
When I do that I don't get a password prompt. It always succeeds for every user.
I don't think this should happen

[Jason W]

I see the issue, will fix it tonight.

[Jason W]

should be fixed, please re-import any SCEs that contain the passwd package and test.

[hiro]

openssh-server now has as dependencies:

adduser
coreutils
debconf
debianutils
dpkg
findutils
gcc-4.9-base
init-system-helpers
initscripts
insserv
libacl1
libattr1
libaudit-common
libaudit1
libblkid1
libbsd0
libbz2-1.0
libc6
libcomerr2
libedit2
libgcc1
libgssapi-krb5-2
libk5crypto3
libkeyutils1
libkrb5-3
libkrb5support0
libmount1
libncurses5
libncursesw5
libpam-modules
libpam-runtime
libpam0g
libpcre3
libprocps3
libselinux1
libsemanage-common
libsemanage1
libsepol1
libsmartcols1
libssl1.0.0
libtinfo5
libudev1
libustr-1.0-1
libuuid1
libwrap0
login
lsb-base
mount
ncurses-base
openssh-client
openssh-server
openssh-sftp-server
passwd
perl-base
procps
sensible-utils
startpar
sysv-rc
sysvinit-utils
zlib1g

Seems like debian needs a lot of babysitting from you guys to do anything
Have to reboot the system an other time to test. It's running stuff I need right this moment.

[Jason W]

But out of 20,000+ packages, very few need any adjustment on our end as most just work.  And once adjusted, then the fix applies to all dCore ports and across many releases.  The work is by far done by them, not me. :-)

[hiro]

yeah, all those graphical apps that people use are probably fine as long as the base works.
I like not having to force all this software to fit into tinycorelinux package repos, seems like duplicated effort especially when every package anyways depends on every other package (not distribution-specific, but typical for big programs)

it does freak me out though that a basic program like openssh gets all those dependencies by default in debian. dcore showcases that fact quite well. so perhaps it's helpful in rising awareness

[hiro]

I see the issue, will fix it tonight.

can you tell me what you saw/fixed?
I rebooted my server now but i still have the old problem.
Should running sce-update before rebooting have been enough?

[Jason W]

I moved to using busybox passwd.

What is the output of the command -

which passwd

[hiro]

$ ls -l `which passwd`
lrwxrwxrwx 1 root root 41 Sep 22 22:26 /usr/bin/passwd -> /tmp/tcloop/openssh-server/usr/bin/passwd

also, even more concerning:

$ ls -l `which su`
lrwxrwxrwx 1 root root 33 Sep 22 22:26 /bin/su -> /tmp/tcloop/openssh-server/bin/su


Can you explain what's technically happening here? Why is the debian su failing to protect us in any way and doesn't ask for a password?

[hiro]

I also noticed that when I do sce-update -a I keep on getting an update of
    libgnutls-deb0-28        debian jessie main

It results in this to be downloaded every time over again:
Connecting to security.debian.org (212.211.132.250:80)
libgnutls-deb0-28_3. 100% |******************************************************************************************************************************************************************|   692k  0:00:00 ETA
Merging libgnutls-deb0-28