Bug: Adding a user to a group in the UI no longer adds them to the unix group

Started by davidolrik, March 31, 2025, 12:05:07 PM

Previous topic - Next topic
Hi,

I have just discovered a small bug regarding user group membership:

When editing a user in the UI, adding or removing a user from a group no longer updates the unix group membership.

Bug seen on OPNsense 25.1.4_1-amd64

--
Best regards,
David Jack Wange Olrik

It is possible that you encounter the following:

OPNsense 25.1 released

Quoteo The access management was rewritten in MVC and contains behavioural changes including not rendering UNIX accounts for non-shell users. [...]
Deciso DEC740

Quote from: patient0 on March 31, 2025, 12:20:34 PMIt is possible that you encounter the following:

OPNsense 25.1 released


I don't think so, I have 4 installations with OPNsense 25.1.4_1-amd64 and only one of them is exhibiting the problem.

All of the users are non-admin accounts with a shell configured so they can be used as a jump host.

The UI renders fine, but adding or removing group membership has no effect.

As a workaround, I've just added the user to the unix group manually like so `sudo pw group mod ssh -m <username>`

Quote from: davidolrik on March 31, 2025, 08:23:08 PMAs a workaround, I've just added the user to the unix group manually like so `sudo pw group mod ssh -m <username>`

That won't survive a reboot, IIRC.
Deciso DEC750
People who think they know everything are a great annoyance to those of us who do. (Isaac Asimov)


Quote from: davidolrik on April 03, 2025, 08:33:33 PM
Quote from: Patrick M. Hausen on March 31, 2025, 10:35:40 PMThat won't survive a reboot, IIRC.

It does indeed survive a reboot.

Interesting, thanks. What about doing any modification on users and/or groups in the UI and clicking "save"?
Deciso DEC750
People who think they know everything are a great annoyance to those of us who do. (Isaac Asimov)