2024-08-22T00:00:50  <matrix-o-o> <Firstyear (Firstyear)> Anyway, I'll do the kani update today then :)
2024-08-22T00:17:26  *** teepee_ is now known as teepee
2024-08-22T00:47:51  <acidsys> cool :)
2024-08-22T04:54:40  <matrix-o-o> <Karthik (కార్తీక్)> acidsys: vpn users manage systemd service was disabled. just observed
2024-08-22T04:59:59  <matrix-o-o> <Firstyear (Firstyear)> acidsys: Upgrade done :)
2024-08-22T05:50:23  <matrix-o-o> <Karthik (కార్తీక్)> acidsys: i guess the admin can only change the user's shell https://kanidm.github.io/kanidm/stable/accounts/posix_accounts_and_groups.html?highlight=shell#enabling-posix-attributes-on-accounts
2024-08-22T05:50:40  <matrix-o-o> <Karthik (కార్తీక్)> please change mine to bash
2024-08-22T05:59:56  <matrix-o-o> <Firstyear (Firstyear)> What's your username?
2024-08-22T06:01:47  <matrix-o-o> <Firstyear (Firstyear)> Karthik (కార్తీక్): Done.
2024-08-22T06:01:54  <matrix-o-o> <Firstyear (Firstyear)> Your shell in /bin/bash now.
2024-08-22T06:02:00  <matrix-o-o> <Firstyear (Firstyear)> * is
2024-08-22T06:03:07  <matrix-o-o> <Firstyear (Firstyear)> Though I'm pretty sure that's the default shell anyway
2024-08-22T06:29:13  *** kl_eisbaer1 is now known as kl_eisbaer
2024-08-22T06:29:21  <matrix-o-o> <Karthik (కార్తీక్)> Firstyear (Firstyear): thank you!
2024-08-22T06:29:31  <matrix-o-o> <Karthik (కార్తీక్)> Firstyear (Firstyear): default is /bin/sh
2024-08-22T10:00:47  *** teepee_ is now known as teepee
2024-08-22T10:05:21  <acidsys> Karthik: service is expected to be disabled, it is triggered by the (enabled) timer
2024-08-22T10:05:47  <acidsys> yes we set /bin/sh by default
2024-08-22T12:49:26  <matrix-o-o> <Firstyear (Firstyear)> acidsys: Ahhh okay.
2024-08-22T13:43:04  <acidsys> Firstyear: in FreeIPA users were able to change data in their own account like the login shell on their own, maybe we can allow that in Kanidm?
2024-08-22T14:54:16  <matrix-o-o> <Emma [it/its]> Karthik (కార్తీక్): which is usually a symlink to bash
2024-08-22T14:54:41  <matrix-o-o> <Emma [it/its]> (on most distros, except ubuntu whre its a symlink to dash)
2024-08-22T14:55:47  <matrix-o-o> <Richard Rahl> Emma [it/its]: Which they inherit from debian ;) so 2 distros
2024-08-22T14:56:14  <matrix-o-o> <Emma [it/its]> oh? i thought thatwas just a ubuntu thing ^^'
2024-08-22T14:56:46  <matrix-o-o> <Richard Rahl> acidsys: fixed my issue. Seems like the element android client from github directly broke something and i had to reset my whole matrix account (encryption keys etc) to get images back
2024-08-22T14:57:49  <matrix-o-o> <Richard Rahl> No, for now ubuntu is mostly debian + support, but it is slowly changing (not specifically talking about snaps. As there are already packages which they pull from upstream, not debian)
2024-08-22T15:01:36  <matrix-o-o> <Conan Kudo> Emma [it/its]: tbh, I wonder when debian will go back to symlinking to bash
2024-08-22T15:01:48  <acidsys> Emma: it is a symlink to bash, but bash will execute in POSIX mode if called as sh
2024-08-22T15:01:58  <matrix-o-o> <Conan Kudo> the reasons for symlinking to dash were nebulous back in the day and dash isn't all that well-maintained these days
2024-08-22T15:02:08  <acidsys> I like the distros linking to dash
2024-08-22T15:03:02  <matrix-o-o> <Conan Kudo> well that's based on the premise that bash is "slow", which... these days I would argue it's not really
2024-08-22T15:03:22  <acidsys> I don't know about speed, I think it's good to have a portable standard
2024-08-22T15:03:42  <acidsys> in containers size is also a benefit
2024-08-22T15:16:05  <matrix-o-o> <Karthik (కార్తీక్)> acidsys: oh! i was unable to read the recent logs. was there any logrotate
2024-08-22T15:48:05  <acidsys> Karthik: `uptime` suggests there was a reboot which would have also come with rotation of the journal
2024-08-22T15:49:29  <acidsys> I should implement some access for you to the files on the syslog server which persist for longer
2024-08-22T15:51:33  <acidsys> hmm maybe we should just recursively make them group readable for "heroes"
2024-08-22T22:32:10  <matrix-o-o> <Firstyear (Firstyear)> acidsys: Just because freeipa does, doesn't mean we should. I seem to recall there are some possible security issues with allowing shells to be changed, so we'd need to check /etc/shells on the resolver
2024-08-22T22:32:50  <matrix-o-o> <Firstyear (Firstyear)> If you want it as a feature, open the issue on github :)
2024-08-22T22:39:03  <acidsys> it was actually a security feature, in the past users tended to change it to something not installed on the systems they want to connect to, causing their login to get refused
2024-08-22T22:40:40  <matrix-o-o> <Firstyear (Firstyear)> That's also why kani doesn't let people change it, because that way people can't shoot themselves in the foot.
2024-08-22T22:41:39  <acidsys> it's mostly inconvenient because the user side just gets a generic error with the real error only showing in the sshd or pam output
2024-08-22T22:42:24  <acidsys> but shell was just an example anyways
2024-08-22T23:51:26  *** teepee_ is now known as teepee