Bug 15548 - Locked out from Mageia. Passwords not working.
Summary: Locked out from Mageia. Passwords not working.
Status: RESOLVED DUPLICATE of bug 14266
Alias: None
Product: Mageia
Classification: Unclassified
Component: RPM Packages (show other bugs)
Version: Cauldron
Hardware: x86_64 Linux
Priority: Normal normal
Target Milestone: Mageia 5
Assignee: Mageia Bug Squad
QA Contact:
URL:
Whiteboard:
Keywords:
Depends on: 14266
Blocks:
  Show dependency treegraph
 
Reported: 2015-03-21 12:41 CET by Jude Ashvin Lobo Shenoy
Modified: 2015-03-22 16:42 CET (History)
4 users (show)

See Also:
Source RPM: setup
CVE:
Status comment:


Attachments
Locked out of Mageia (877.01 KB, image/jpeg)
2015-03-21 18:42 CET, Jude Ashvin Lobo Shenoy
Details
Locked out of Mageia (886.80 KB, image/jpeg)
2015-03-21 18:43 CET, Jude Ashvin Lobo Shenoy
Details
Locked out of Mageia (754.01 KB, image/jpeg)
2015-03-21 18:43 CET, Jude Ashvin Lobo Shenoy
Details
Locked out of Mageia (839.55 KB, image/jpeg)
2015-03-21 18:44 CET, Jude Ashvin Lobo Shenoy
Details
Locked out of Mageia (896.97 KB, image/jpeg)
2015-03-21 18:45 CET, Jude Ashvin Lobo Shenoy
Details

Description Jude Ashvin Lobo Shenoy 2015-03-21 12:41:36 CET
As of 9AM on 21 March 2015 i had fixed issues with booting up my
 sys running Mageia with a 3.19.2.1 Kernel. Thanks to Mageia Team.
 
 I was informed by my updates manager of new updates (dont actually
 remember which updates but drax something) so i run updates and am
 informed that the update process was successful. 
 
 I open chromium but then i notice i have no internet access. So
 open Firefox and same results. So i decided to restart my pc 
 thinking that a reboot would iron out the issue. I reboot to my
 login screen and when i try to login i get "Login failed". Tried a Lot
 but same result. Lucky that i had a backup on my ext HDD. Tried 
 a few stunts through grub commandline but still no success. Last i
 decide to reinstall Mageia and am in the process of arranging a few
 things on my pc now. Sad that the update mirrors are agonizingly 
 slow.
 
 Need help on how to avoid such situations in the future and hope this may 
 help others. I had the following active on at that time of lockout...
 Local live core
 local live nonfree
 mirror list core release
 mirror list core updates
 mirror list nonfree release
 mirror list nonfree updates
 mirror list tainted release
 mirror list tainted updates
 mirror list core 32 bit release
 mirror list core 32 bit updates
 mirror list nonfree 32 bit release
 mirror list nonfree 32 bit updates
 http google-chrome
Jude Ashvin Lobo Shenoy 2015-03-21 13:45:50 CET

Priority: Normal => High
Target Milestone: --- => Mageia 5

Comment 1 James Kerr 2015-03-21 13:56:08 CET
(In reply to Jude Ashvin  Lobo Shenoy from comment #0)
Need help on how to avoid such situations in the future

Never allow an update to the setup package to replace configuration files. In fact it is always safest to refuse to allow any package update to replace  configuration files, unless you are certain that it is safe to do so. You will be asked (and given the opportunity to review the changes) before a package update replaces configuration files.

The latest setup update includes a replacement for /etc/shadow (which contains the passwords.) IIRC it may also provide a replacement for /etc/fstab.
Comment 2 James Kerr 2015-03-21 14:01:57 CET
I've lowered the severity and priority, since this problem can be avoided by refusing to accept the new configuration files - which is the recommended action when "in doubt".

Priority: High => Normal
Component: Installer => RPM Packages
Source RPM: (none) => setup
Severity: critical => normal

Comment 3 Marja Van Waes 2015-03-21 16:51:51 CET
@ Jude

Did you indeed agree to use rpm.new, when asked?

If so:

Can you please tell us exactly how you updated?

Did you use the command line? If so, which command did you use?

Or did you click on the red button with the white exclamation mark in the task bar?

Or?

Your answer will help us find out what went wrong

CC: (none) => marja11
Depends on: (none) => 14266

Comment 4 Jude Ashvin Lobo Shenoy 2015-03-21 17:41:22 CET
yes i did use the red dot with the exclamation mark and it did update.

i did a fresh install of mageia and went into MCC configured the updates and i then updated the system via MCC but this time not via the red dot.

The minute the updates were complete i rebooted the sys and again i could not login. The first update after fresh reinstall asked me to reinstall drax and the rest of around 8 packages maybe (7.2 MB). Then i see a large list of updates which i went ahead updating. After this update am still logged out sadly. In 2 days this is my 3rd reinstallation but this time i am not installing kernel 3.19.2.1.
Comment 5 Jude Ashvin Lobo Shenoy 2015-03-21 17:42:49 CET
Updates going on now but this time i have only the below ticked....
Local live core
 local live nonfree
 mirror list core release
 mirror list core updates
 mirror list nonfree release
 mirror list nonfree updates
 mirror list tainted release
 mirror list tainted updates
Comment 6 Jude Ashvin Lobo Shenoy 2015-03-21 18:42:37 CET
Created attachment 6111 [details]
Locked out of Mageia

After the initial updates are complete sans kernel 3.19.2
Comment 7 Jude Ashvin Lobo Shenoy 2015-03-21 18:43:18 CET
Created attachment 6112 [details]
Locked out of Mageia
Comment 8 Jude Ashvin Lobo Shenoy 2015-03-21 18:43:54 CET
Created attachment 6113 [details]
Locked out of Mageia
Comment 9 Jude Ashvin Lobo Shenoy 2015-03-21 18:44:32 CET
Created attachment 6114 [details]
Locked out of Mageia
Comment 10 Jude Ashvin Lobo Shenoy 2015-03-21 18:45:11 CET
Created attachment 6115 [details]
Locked out of Mageia
Comment 11 Jude Ashvin Lobo Shenoy 2015-03-21 18:51:51 CET
The good news is am not locked out after the update process is over. I did it this way so have attached pics in sequence. Sorry for the quality.

Pic 1 shows a box suggesting the update process has completed successfully and that some config files were created. 

Pic 2 shows the inspect button which i clicked and selected the do nothing option for all the six items.

Pic 4 show the /etc/shadow.rpmnew box open (i selected do nothing and i feel there is a threat lurking here somewhere)

Pic 5 shows the second time i started the updates sans the 3 firefox options and rebooted the system after kernel 3.19.2 was installed and am inside my Mageia.
Comment 12 Jude Ashvin Lobo Shenoy 2015-03-21 19:09:49 CET
I feel there could be a problem in the first 3 config files as seen in Pic 1 but my gut feeling says it's in the shadow file. Apologies in advance as am new to linux (exactly 1 year this date and have tried the first 6 distros on distrowatch and have found Mageia and opensuse to be the best i could use). Keeping my fingers crossed.
Angelo Naselli 2015-03-21 23:15:04 CET

CC: (none) => anaselli

Comment 13 Marja Van Waes 2015-03-22 09:13:54 CET
Thanks a lot for the pictures, they are very clarifying

(In reply to Jude Ashvin  Lobo Shenoy from comment #6)
> Created attachment 6111 [details]
> Locked out of Mageia
> 

(In reply to Jude Ashvin  Lobo Shenoy from comment #7)
> Created attachment 6112 [details]
> Locked out of Mageia


Ah, I can understand that feels like being locked out.... you are not locked out at all, though ;-)

All you have to do is inspect the files and choose "Do nothing"

I suppose you chose "use .rpmnew as the main file" for /etc/shadow before you found you could no longer log in.

If you get a choice to use .rpmnew, but wouldn't know whether you should,it is always better to choose "Do nothing"

Trying to CC documentation team, because I cannot find in our official manual what to do when you get this choice
http://docteam.mageia.nl/en/MCC/content/MageiaUpdate.html

However: CC: 	
doc-discuss@ml.mageia.org did not match anything
Comment 14 Jude Ashvin Lobo Shenoy 2015-03-22 10:46:44 CET
Yes first i chose to use the .rpmnew for /etc/shadow so i was like kicked out of my house...LOL though. In future am going for the do nothing option if things sound french here. Thnaks a lot for all help :) I also managed to remove and add a new faster mirror for my updates and all's smooth now.
Marja Van Waes 2015-03-22 12:25:36 CET

CC: (none) => doc-bugs

Comment 15 Jude Ashvin Lobo Shenoy 2015-03-22 16:08:04 CET
Can't this box with configurations be totally avoided as i dont see anything of that sort in other Linux OS. We could save a lot of people of a serious heart ache :) Better no configurations at all.
Comment 16 Florian Hubold 2015-03-22 16:42:04 CET
Marking as duplicate of 14266 and it's also a duplicate of previously reported bug 12006

*** This bug has been marked as a duplicate of bug 14266 ***

Status: NEW => RESOLVED
CC: (none) => doktor5000
Resolution: (none) => DUPLICATE


Note You need to log in before you can comment on or make changes to this bug.