OPNsense Forum

English Forums => 25.1, 25.4 Production Series => Topic started by: davidolrik on March 31, 2025, 12:05:07 PM

Title: Bug: Adding a user to a group in the UI no longer adds them to the unix group
Post by: davidolrik on March 31, 2025, 12:05:07 PM
Hi,

I have just discovered a small bug regarding user group membership:

When editing a user in the UI, adding or removing a user from a group no longer updates the unix group membership.

Bug seen on OPNsense 25.1.4_1-amd64

--
Best regards,
David Jack Wange Olrik
Title: Re: Bug: Adding a user to a group in the UI no longer adds them to the unix group
Post by: patient0 on March 31, 2025, 12:20:34 PM
It is possible that you encounter the following:

OPNsense 25.1 released (https://forum.opnsense.org/index.php?topic=45460.msg227323#msg227323)

Quoteo The access management was rewritten in MVC and contains behavioural changes including not rendering UNIX accounts for non-shell users. [...]
Title: Re: Bug: Adding a user to a group in the UI no longer adds them to the unix group
Post by: davidolrik on March 31, 2025, 08:23:08 PM
Quote from: patient0 on March 31, 2025, 12:20:34 PMIt is possible that you encounter the following:

OPNsense 25.1 released (https://forum.opnsense.org/index.php?topic=45460.msg227323#msg227323)


I don't think so, I have 4 installations with OPNsense 25.1.4_1-amd64 and only one of them is exhibiting the problem.

All of the users are non-admin accounts with a shell configured so they can be used as a jump host.

The UI renders fine, but adding or removing group membership has no effect.

As a workaround, I've just added the user to the unix group manually like so `sudo pw group mod ssh -m <username>`
Title: Re: Bug: Adding a user to a group in the UI no longer adds them to the unix group
Post by: Patrick M. Hausen on March 31, 2025, 10:35:40 PM
Quote from: davidolrik on March 31, 2025, 08:23:08 PMAs a workaround, I've just added the user to the unix group manually like so `sudo pw group mod ssh -m <username>`

That won't survive a reboot, IIRC.
Title: Re: Bug: Adding a user to a group in the UI no longer adds them to the unix group
Post by: davidolrik on April 03, 2025, 08:33:33 PM
Quote from: Patrick M. Hausen on March 31, 2025, 10:35:40 PMThat won't survive a reboot, IIRC.

It does indeed survive a reboot.
Title: Re: Bug: Adding a user to a group in the UI no longer adds them to the unix group
Post by: Patrick M. Hausen on April 03, 2025, 08:37:32 PM
Quote from: davidolrik on April 03, 2025, 08:33:33 PM
Quote from: Patrick M. Hausen on March 31, 2025, 10:35:40 PMThat won't survive a reboot, IIRC.

It does indeed survive a reboot.

Interesting, thanks. What about doing any modification on users and/or groups in the UI and clicking "save"?