[Bug 1545884] Re: Xenial's shadow regresses subid allocation logic (wastes uids and gids)

[Serge Hallyn]

Oh, the bug is that process_flags() is being called after we check for
rflg

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to shadow in Ubuntu.
https://bugs.launchpad.net/bugs/1545884

Title:
  Xenial's shadow regresses subid allocation logic (wastes uids and
  gids)

Status in shadow package in Ubuntu:
  Triaged
Status in shadow source package in Xenial:
  Triaged

Bug description:
  Back in trusty I wrote a patch to shadow which makes sure we only ever
  allocate a 65k uid/gid map to new users that aren't a system user (no
  --system flag and not a system uid/gid).

  This has regressed recently in Xenial and on a fresh install I found
  myself with about 15 system users each having 65536 uids and gids
  allocated to them. That's wasteful and may end up creating accidental
  collisions when using network authentication.

  I have now upstreamed the change we used to have as a distro patch:
     https://github.com/shadow-maint/shadow/pull/12

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/shadow/+bug/1545884/+subscriptions