User Manager bug

Gil · Jul 27, 2021, 1:47 AM

I have a bizarre occurrence happening with assigning Group Memberships to users.
I find that two separate users seem to have their Group Members interlocked.
e.g. If I change the assignment for user2 from admins to users; then user6 also has their Group Membership changed from admins to users.
I find the same interlocking between user3 and user7.
It is consistent and repeatable.

jimp · Jul 27, 2021, 2:19 PM

Is this happening on 2.5.2 or an older version?

Were the users created in the GUI and only in the GUI? Or imported some other way?

I've never seen that happen, not sure how it might be, only things I can think of are:

Somehow the id (array index, not username) is pointing to a different user between the time you open the page and the time you save the user)
Something in config.xml isn't right for those users, like they are sharing the same internal <uid> value somehow. For example maybe someone hand edited those users into a config.xml backup by copy/pasting and didn't adjust the values properly. Or the users were copied in from two different firewalls and didn't get adjusted properly.

Gil · Jul 27, 2021, 11:15 PM

Version 21.05-RELEASE on an SG-1100.
The original config has come from different hardware (APU2) some time ago.
I'll have a look at the xml and see if there is anything strange with the <uid>

Gil · Jul 28, 2021, 3:48 AM

The xml revealed a several users on the several identical uid's
Editing it and picking random uid seems to have solved it.
Are there any restrictions regarding the format or sequencing of uid's?

Gil · Jul 28, 2021, 3:54 AM

Also - relating to a separate post.
You may be interested in the fact that the pfSense logo disappears when I select the pfsense-Beta theme on my SG-1100.
Perhaps this is related to the xml errors from hardware upgrade.

jimp · Jul 29, 2021, 1:54 PM

@gil said in User Manager bug:

The xml revealed a several users on the several identical uid's
Editing it and picking random uid seems to have solved it.
Are there any restrictions regarding the format or sequencing of uid's?

They should follow the same conventions as FreeBSD user IDs. By default users on pfSense start with a uid of 2000 and go up by one for each new user.