Scheduled Maintenance: We are aware of an issue with Google, AOL, and Yahoo services as email providers which are blocking new registrations. We are trying to fix the issue and we have several internal and external support tickets in process to resolve the issue. Please see: viewtopic.php?t=158230

 

 

 

UID < 1000 not in mate login screen

Graphical Environments, Managers, Multimedia & Desktop questions.
Post Reply
Message
Author
User avatar
gurfle
Posts: 377
Joined: 2009-06-04 02:08
Location: Seattle, Washington, US

UID < 1000 not in mate login screen

#1 Post by gurfle »

My setup is Debian 9.2 (stretch).
I have found a number of discussions about this, for example
https://ubuntuforums.org/showthread.php?t=2222085 and
https://askubuntu.com/questions/98323/h ... th-lightdm
I have tried everything suggested there, except disabling accountsservice, which I am reluctant to do unless I can be assured that would be safe. Is that really necessary, and more importantly is it really OK to do? I see a lot of mate packages depend on the accountsservice package.

Anyway, users with UID < 100 in the mate login screen remain hidden using the following relevant sections of all the relevant configuration files mentioned in the solutions in the above links:

/etc/login.defs:

Code: Select all

#
# Min/max values for automatic uid selection in useradd
#
UID_MIN                  500
UID_MAX                 399999
# System accounts
#SYS_UID_MIN              100
#SYS_UID_MAX              999

#
# Min/max values for automatic gid selection in groupadd
#
GID_MIN                  500
GID_MAX                 399999
# System accounts
#SYS_GID_MIN              100
#SYS_GID_MAX              999
/etc/lightdm/users.conf:

Code: Select all

#
# User accounts configuration
#
# NOTE: If you have AccountsService installed on your system, then LightDM will
# use this instead and these settings will be ignored
#
# minimum-uid = Minimum UID required to be shown in greeter
# hidden-users = Users that are not shown to the user
# hidden-shells = Shells that indicate a user cannot login
#
[UserList]
minimum-uid=500
hidden-users=nobody nobody4 noaccess
hidden-shells=/bin/false /usr/sbin/nologin
/etc/adduser.conf:

Code: Select all

# FIRST_SYSTEM_[GU]ID to LAST_SYSTEM_[GU]ID inclusive is the range for UIDs
# for dynamically allocated administrative and system accounts/groups.
# Please note that system software, such as the users allocated by the base-passwd
# package, may assume that UIDs less than 100 are unallocated.
FIRST_SYSTEM_UID=100
LAST_SYSTEM_UID=499

FIRST_SYSTEM_GID=100
LAST_SYSTEM_GID=499

# FIRST_[GU]ID to LAST_[GU]ID inclusive is the range of UIDs of dynamically
# allocated user accounts/groups.
FIRST_UID=500
LAST_UID=399999

FIRST_GID=500
LAST_GID=59999

# The USERGROUPS variable can be either "yes" or "no".  If "yes" each
# created user will be given their own group to use as a default.  If
# "no", each created user will be placed in the group whose gid is
# USERS_GID (see below).
USERGROUPS=yes

# If USERGROUPS is "no", then USERS_GID should be the GID of the group
# `users' (or the equivalent group) on your system.
USERS_GID=100

User avatar
debiman
Posts: 3063
Joined: 2013-03-12 07:18

Re: UID < 1000 not in mate login screen

#2 Post by debiman »

i'm sorry, is there a question?

fwiw, i think it makes sense to exclude UIDs < 1000 from graphical login screens.
i mean, you wouldn't want to log in as the 'video' user...
you can look at the numerical UIDs in /etc/passwd to understand better.

User avatar
gurfle
Posts: 377
Joined: 2009-06-04 02:08
Location: Seattle, Washington, US

Re: UID < 1000 not in mate login screen

#3 Post by gurfle »

Sorry, the question was implied: How to get users with UID < 1000 on the mate log in screen.

It is supposed to be possible according to the two links I gave. It is sometimes necessary to sync users on remote machines that have such UIDs. If the UIDs are not the same, file permissions on the remote systems don't work when mounted locally. That's the reason I would like this to work. You will find others having that requirement in other on-line discussions about the issue. I believe this is the main reason the UID limit is made a configurable parameter. Now if only it could be made to work!

Post Reply