{"action":"created","issue":{"url":"https://api.github.com/repos/NixOS/nixpkgs/issues/11317","labels_url":"https://api.github.com/repos/NixOS/nixpkgs/issues/11317/labels{/name}","comments_url":"https://api.github.com/repos/NixOS/nixpkgs/issues/11317/comments","events_url":"https://api.github.com/repos/NixOS/nixpkgs/issues/11317/events","html_url":"https://github.com/NixOS/nixpkgs/issues/11317","id":119276121,"number":11317,"title":"nm-openvpn uid conflicts with uid standard normal user","user":{"login":"goodwillcoding","id":582074,"avatar_url":"https://avatars.githubusercontent.com/u/582074?v=3","gravatar_id":"","url":"https://api.github.com/users/goodwillcoding","html_url":"https://github.com/goodwillcoding","followers_url":"https://api.github.com/users/goodwillcoding/followers","following_url":"https://api.github.com/users/goodwillcoding/following{/other_user}","gists_url":"https://api.github.com/users/goodwillcoding/gists{/gist_id}","starred_url":"https://api.github.com/users/goodwillcoding/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/goodwillcoding/subscriptions","organizations_url":"https://api.github.com/users/goodwillcoding/orgs","repos_url":"https://api.github.com/users/goodwillcoding/repos","events_url":"https://api.github.com/users/goodwillcoding/events{/privacy}","received_events_url":"https://api.github.com/users/goodwillcoding/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/NixOS/nixpkgs/labels/0.kind:%20bug","name":"0.kind: bug","color":"84b6eb"},{"url":"https://api.github.com/repos/NixOS/nixpkgs/labels/6.topic:%20nixos","name":"6.topic: nixos","color":"fef2c0"}],"state":"open","locked":false,"assignee":null,"milestone":{"url":"https://api.github.com/repos/NixOS/nixpkgs/milestones/7","html_url":"https://github.com/NixOS/nixpkgs/milestones/16.03","labels_url":"https://api.github.com/repos/NixOS/nixpkgs/milestones/7/labels","id":1055044,"number":7,"title":"16.03","description":"","creator":{"login":"thoughtpolice","id":3416,"avatar_url":"https://avatars.githubusercontent.com/u/3416?v=3","gravatar_id":"","url":"https://api.github.com/users/thoughtpolice","html_url":"https://github.com/thoughtpolice","followers_url":"https://api.github.com/users/thoughtpolice/followers","following_url":"https://api.github.com/users/thoughtpolice/following{/other_user}","gists_url":"https://api.github.com/users/thoughtpolice/gists{/gist_id}","starred_url":"https://api.github.com/users/thoughtpolice/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/thoughtpolice/subscriptions","organizations_url":"https://api.github.com/users/thoughtpolice/orgs","repos_url":"https://api.github.com/users/thoughtpolice/repos","events_url":"https://api.github.com/users/thoughtpolice/events{/privacy}","received_events_url":"https://api.github.com/users/thoughtpolice/received_events","type":"User","site_admin":false},"open_issues":41,"closed_issues":110,"state":"open","created_at":"2015-04-06T19:40:15Z","updated_at":"2015-12-07T19:27:45Z","due_on":null,"closed_at":null},"comments":4,"created_at":"2015-11-28T07:22:54Z","updated_at":"2015-12-08T13:12:04Z","closed_at":null,"body":"Hi @domenkozar \r\nI recently provisioned a new 15.09 release box which ad my own custom user on it with basic configuration and immutable users:\r\n\r\n    users = { \r\n        mutableUsers = false;\r\n        extraGroup.me = {\r\n            name = \"me\";\r\n            gid = 1000;\r\n        };\r\n        extraUsers.me = {\r\n            isNormalUser = true;\r\n            uid = 1000;\r\n            group = \"me\";\r\n        };\r\n    };\r\n\r\nThis box's installation also included NetworkManager as part of Gnome3. An odd issue started to happen shortly, where when WiFI was to drop and reconnenct my user name would suddenly change to nm-openvpn, which I could tell when I would open a new terminal and the PS1 line showed \"nm-openvpn@hostname\"\r\n\r\nUpon investigation of the /etc/password using getent it became clear that both users were created with the same uid. Here is the getent return\r\n\r\n    $ getent passwd me nm-openvpn\r\n    \r\n    me:x:1000:1000::/home/me:/run/current-system/sw/bin/bash\r\n    nm-openvpn:x:1000:65534::/var/empty:/run/current-system/sw/bin/nologin\r\n\r\n\r\nAfter looking over https://github.com/NixOS/nixpkgs/issues/10689 and https://github.com/kamilchm/nixpkgs/commit/832c4ee7fdd79acc9cf87939f3b296881c13d8e2 it seems that nm-openvpn is not created with a specific uid (nor it's counterpart group created with a specific gid). That said users.enforceIdUniqueness is set to true so I am a bit at a loss as how this happened and might indicate bug with mutable users. I'll try to reproduce the bug this week to see if that is the case.\r\n\r\nSetting the potential user creation bug aside I would say that nm-openvpn user and group should have their own ids/gids in ids.nix. If that is the case I will be happy to do a PR, please advise on the following though: do you want 2 PRs, one against master and one against release-15.09. Also do you want me to reflect the change in release notes somewhere.\r\n\r\n-- @goodwillcoding\r\n"},"comment":{"url":"https://api.github.com/repos/NixOS/nixpkgs/issues/comments/162875577","html_url":"https://github.com/NixOS/nixpkgs/issues/11317#issuecomment-162875577","issue_url":"https://api.github.com/repos/NixOS/nixpkgs/issues/11317","id":162875577,"user":{"login":"ThomasMader","id":678511,"avatar_url":"https://avatars.githubusercontent.com/u/678511?v=3","gravatar_id":"","url":"https://api.github.com/users/ThomasMader","html_url":"https://github.com/ThomasMader","followers_url":"https://api.github.com/users/ThomasMader/followers","following_url":"https://api.github.com/users/ThomasMader/following{/other_user}","gists_url":"https://api.github.com/users/ThomasMader/gists{/gist_id}","starred_url":"https://api.github.com/users/ThomasMader/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ThomasMader/subscriptions","organizations_url":"https://api.github.com/users/ThomasMader/orgs","repos_url":"https://api.github.com/users/ThomasMader/repos","events_url":"https://api.github.com/users/ThomasMader/events{/privacy}","received_events_url":"https://api.github.com/users/ThomasMader/received_events","type":"User","site_admin":false},"created_at":"2015-12-08T13:12:04Z","updated_at":"2015-12-08T13:12:04Z","body":"I have the same problem.\r\n@domenkozar My configuration is pretty small and you might be able to reproduce the problem. For me it happens when I try to sudo from my user account \"thomad\" it happens that nm-openvpn user is used for the sudo and so I can't sudo at all.\r\n\r\nhttps://github.com/ThomasMader/configuration/blob/master/configuration.nix"}}