[Bug 1545884] Re: Xenial's shadow regresses subid allocation logic (wastes uids and gids)

[Stéphane Graber]

root at dakara:~# useradd --system blah

root at dakaracat /etc/subgid
lxd:100000:65536
root:100000:65536
sshd:165536:65536
sbuild:231072:65536
blah:296608:65536

blah most definitely shouldn't be there!

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to shadow in Ubuntu.
https://bugs.launchpad.net/bugs/1545884

Title:
  Xenial's shadow regresses subid allocation logic (wastes uids and
  gids)

Status in shadow package in Ubuntu:
  Triaged
Status in shadow source package in Xenial:
  Triaged

Bug description:
  Back in trusty I wrote a patch to shadow which makes sure we only ever
  allocate a 65k uid/gid map to new users that aren't a system user (no
  --system flag and not a system uid/gid).

  This has regressed recently in Xenial and on a fresh install I found
  myself with about 15 system users each having 65536 uids and gids
  allocated to them. That's wasteful and may end up creating accidental
  collisions when using network authentication.

  I have now upstreamed the change we used to have as a distro patch:
     https://github.com/shadow-maint/shadow/pull/12

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/shadow/+bug/1545884/+subscriptions