View Single Post
  #1  
Old 16th August 2007, 17:06
Sidi Sidi is offline
Junior Member
 
Join Date: Aug 2007
Posts: 4
Thanks: 0
Thanked 0 Times in 0 Posts
Default ISPConfig kills system user?

Hi,

I thing I have found a litte bug in ISPConfig 2.3.12 (yes, I know it isn't
the latest, but I havn't seen this in the changelog):

If a reseller add a new (email-) user, ISPConfig doesn't seem to check if
this name already exists as an systemuser in /etc/passwd.

I had for example a user "martin" with UID 1000, ISPConfig uses UID's > 10000. A reseller had add an email-user "martin" which was added with UID 10318 and my old "martin" was deleted in the /etc/passwd.

Haven't checked yet if you also can delete such users as "uucp", "www-data" or even "root" this way.

regards,
martin
Reply With Quote
Sponsored Links