What are the 1000, 10001.. user accounts?

RS1 · 3. Januar 2017

Hi all, I've just done a fresh install of OMV 3. I noticed that there are several user accounts (1000, 1001..). I didn't have these in OMV2; I only had those accounts that I created.

Did OMV3 create these accounts? As you can see from the attached picture, permissions have already been set for them by someone/something else. Thoughts?

subzero79 · 3. Januar 2017

Those are uid/gid numbers. They are associated with user/group accounts. Strange that's displaying the numbers.

Can you please post the output of this command

cat /etc/passwd

RS1 · 3. Januar 2017

Here is the output (sidenote: is there anything in this that shouldn't be shared publicly?)

Code

root@NAS:/# cat /etc/passwd
root:x:0:0:root:/root:/bin/bash
daemon:x:1:1:daemon:/usr/sbin:/usr/sbin/nologin
bin:x:2:2:bin:/bin:/usr/sbin/nologin
sys:x:3:3:sys:/dev:/usr/sbin/nologin
sync:x:4:65534:sync:/bin:/bin/sync
games:x:5:60:games:/usr/games:/usr/sbin/nologin
man:x:6:12:man:/var/cache/man:/usr/sbin/nologin
lp:x:7:7:lp:/var/spool/lpd:/usr/sbin/nologin
mail:x:8:8:mail:/var/mail:/usr/sbin/nologin
news:x:9:9:news:/var/spool/news:/usr/sbin/nologin
uucp:x:10:10:uucp:/var/spool/uucp:/usr/sbin/nologin
proxy:x:13:13:proxy:/bin:/usr/sbin/nologin
www-data:x:33:33:www-data:/var/www:/usr/sbin/nologin
backup:x:34:34:backup:/var/backups:/usr/sbin/nologin
list:x:38:38:Mailing List Manager:/var/list:/usr/sbin/nologin
irc:x:39:39:ircd:/var/run/ircd:/usr/sbin/nologin
gnats:x:41:41:Gnats Bug-Reporting System (admin):/var/lib/gnats:/usr/sbin/nologin
nobody:x:65534:65534:nobody:/nonexistent:/usr/sbin/nologin
systemd-timesync:x:100:103:systemd Time Synchronization,,,:/run/systemd:/bin/false
systemd-network:x:101:104:systemd Network Management,,,:/run/systemd/netif:/bin/false
systemd-resolve:x:102:105:systemd Resolver,,,:/run/systemd/resolve:/bin/false
systemd-bus-proxy:x:103:106:systemd Bus Proxy,,,:/run/systemd:/bin/false
messagebus:x:104:109::/var/run/dbus:/bin/false
avahi:x:105:110:Avahi mDNS daemon,,,:/var/run/avahi-daemon:/bin/false
postfix:x:106:113::/var/spool/postfix:/bin/false
statd:x:107:65534::/var/lib/nfs:/bin/false
sshd:x:108:65534::/var/run/sshd:/usr/sbin/nologin
proftpd:x:109:65534::/run/proftpd:/bin/false
ftp:x:110:65534::/srv/ftp:/bin/false
tftp:x:111:116:tftp daemon,,,:/srv/tftp:/bin/false
snmp:x:112:117::/var/lib/snmp:/usr/sbin/nologin
openmediavault-webgui:x:999:997:openmediavault WebGUI Management:/home/openmediavault-webgui:/usr/sbin/nologin
admin:x:998:100:openmediavault WebGUI Administrator:/home/admin:/usr/sbin/nologin
clamav:x:113:118::/var/lib/clamav:/bin/false
nzbget:x:997:996:nzbget:/var/lib/nzbget:/bin/false
sickbeard:x:114:119::/home/sickbeard:/bin/false
webdav:x:115:120::/home/webdav:/bin/false
Ricky:x:1000:100::/home/Ricky:/bin/bash
ssh-user:x:1001:100:lower case uni short:/home/ssh-user:/bin/rbash

Alles anzeigen

ryecoaaron · 3. Januar 2017

Zitat von RS1

is there anything in this that shouldn't be shared publicly?

It is safe to share. You wouldn't want to share /etc/shadow which is where the encrypted passwords for those users live.

Strange. Do you have the ldap plugin installed/configured? You don't even have a user with most of the IDs in your pic.

RS1 · 3. Januar 2017

I don't have LDAP installed, no. I did a fresh install of OMV3 and merely setup one user. I agree, I was surprised to find the 1000..1006, 995 users too.. Should I delete them?

ryecoaaron · 3. Januar 2017

Zitat von RS1

Should I delete them?

You can try but they don't exist in the passwd file. So, you shouldn't be able to delete them. I would try deleting 1006 first since it is not in the passwd file.

RS1 · 3. Januar 2017

I see what you mean. Yes, these users don't exist on the users tab; I only see them when managing ACL for a share.

Is this a security risk? I'm not sure what to do with them..

RS1 · 3. Januar 2017

Just a thought - could these users be related to my reinstallation?

I setup several users while using OMV2, created several shares for these users, upgraded to OMV3. Had issues with SickRage. Reinstalled OMV3, and then setup only 2 users (many of the users that I previously setup were not recreated).

ryecoaaron · 3. Januar 2017

Zitat von RS1

Is this a security risk? I'm not sure what to do with them..

I don't think so. Need to figure out why they are there. I never use ACLs so I wouldn't have noticed this bug (if it is one).

ryecoaaron · 3. Januar 2017

Zitat von RS1

could these users be related to my reinstallation?

Maybe? What is the output (run as root) of: grep 1006 /etc/openmediavault/config.xml

RS1 · 3. Januar 2017

There is no output for 1006.

For 1001:

Code

root@NAS:/# grep 1001 /etc/openmediavault/config.xml
          <priority2>1001</priority2>
          <priority2>1001</priority2>

ryecoaaron · 3. Januar 2017

Maybe @votdev would have a better idea why the privileges grid is showing user and group IDs that don't exist?

votdev · 7. Januar 2017

I have never seen such a behaviour. OMV is using the system tools and the PHP API to get the user information, there is noting special.

RS1 · 7. Januar 2017

These permissions appear to be specific to the share folder. To work around the issue, it was necessary to move data from folder A to folder B. Delete folder A. Recreate folder A. Then move data from folder B to folder A.

I performed the above for two of the five share-folders that I migrated from OMV2. For the remaining three, I used the reset-perms plugin; this plugin works very well.

New folders or shares that are created are not affected, so I presume that the above issue is related to the OMV2 to 3 upgrade (but easily fixable with reset-perms).

votdev · 13. Januar 2017

Are we talking about the ACL dialog? This would be a really important information. If yes, then the UID/GID that are not resolved to names come from a previous OMV installation where the users had other IDs than in the current one.

RS1 · 14. Januar 2017

Thanks for this. Your thoughts make sense. I resolved the issue by using the 'reset perms' plugin on those folders I was sharing on a previous version of OMV.

riff-raff · 19. Mai 2018

I have to pick up this oder topic because I expirience the same issue, but not after an upgrade from OMV.

My OMV3 is running for quite long, I changed permissions for a shared folder and saw under all ACL user 1003 with read-permissions to all of my shared folders. The user 1003 does not show up under unsers tab.

Code

cat /etc/passwd

does not list the 1003 user

security issue?

Jetzt mitmachen!