base-passwd for Debian
----------------------
This package supplies the "master" copies of /etc/passwd and /etc/group,
in /usr/share/base-passwd. It also supplies the utility "update-passwd",
which automatically makes sure that uids and gids in the 0-99 range on
your system are consistent with the Debian master copies. This means
that all entries in the masterfiles in that range have to be present on
your system, and only those entries. The reason for not allowing other
entries is that Debian reserves that range for future use.
All packages assume that the users and groups listed in those
master-files are always present on a system. If they are not present for
some reason they may break unexpectedly. To ensure your system is
correct you can use the update-passwd utility to check it and optionally
make the necessary changes.
There are some exceptions to this:
* root is never removed or changed. If it doesn't exist a root account will
be added though.
* the home directory for the ftp user is preserved, and it is neither added
nor removed automatically since this can affect how FTP daemons handle
anonymous access
* the home directory for the www-data user is preserved
* if a user or group exists but with an uid outside our reserved range
we don't change it
The following uid/gid pairs have been allocated in the static range
60000-64999. They are created by their respective packages. This is the
registry of allocations.
Reserved uids:
uid | name | description
------+-------------------+---------------
63434 | netplan | netplan
64000 | ftn | fidogate
64001 | mysql | mysql-server
64005 | tac-plus | tac-plus user
64010 | alias | qmail alias
64011 | qmaild | qmail daemon
64012 | qmails | qmail send
64013 | qmailr | qmail remove
64015 | qmailq | qmail queue
64016 | qmaill | qmail log
64017 | qmailp | qmail pw
64020 | asterisk | asterisk
64025 | vpopmail | vpopmail
64030 | slurm | slurm-llnl package
64035 | hacluster | heartbeat
64045 | ceph | ceph object storage
64050 | opensrf | Evergreen ILS
64055 | libvirt-qemu | libvirt guest migration support
64060 | nova | OpenStack Compute
64061 | cinder | OpenStack Block Storage
64062 | glance | OpenStack Image
64065 | gnocchi | Gnocchi - Metric as a Service
Reserved gids:
gid | name | description
------+-------------------+---------------
63434 | netplan | netplan
64000 | ftn | fidogate
64001 | mysql | mysql-server
64005 | tac-plus | tac-plus group
64010 | qmail | qmail
64020 | asterisk | asterisk
64025 | vchkpw | vpopmail group
64030 | slurm | slurm-llnl package
64035 | haclient | heartbeat
64040 | grsec-tpe | linux-grsec-base
64041 | grsec-sock-all | linux-grsec-base
64042 | grsec-sock-clt | linux-grsec-base
64043 | grsec-sock-srv | linux-grsec-base
64044 | grsec-proc | linux-grsec-base
64045 | ceph | ceph object storage
64050 | opensrf | Evergreen ILS
64055 | libvirt-qemu | libvirt guest migration support
64060 | nova | OpenStack Compute
64061 | cinder | OpenStack Block Storage
64062 | glance | OpenStack Image
64065 | gnocchi | Gnocchi - Metric as a Service
(Next uid/gid allocation: 64070.)
You *may not* use any uids or gids in the 60000-64999 range without *first*
requesting an allocation from base-passwd@packages.debian.org and waiting
for confirmation that the allocation has been granted.
Mini Shell