[BUG] Debian Bullseye issues setting user passwords

[peterbaumert]

Description
When I try to set the password of the root user, no matter if I use the hashed password or the cleartext with the option set, I can not log in. After I open the file with vipw -s and save it ( nothing edited ). It starts to work.

I tried this with several newly installed minions.

Setup

root.password:
  user.present:
    - name: root
    - password: {{ pillar.root.password }}

Please be as specific as possible and give set-up details.

• on-prem machine
• VM (Virtualbox, KVM, etc. please specify)
• VM running on a cloud service, please be explicit and add details
• container (Kubernetes, Docker, containerd, etc. please specify)
• or a combination, please be explicit
• jails if it is FreeBSD

Steps to Reproduce the behavior

• Install blank Debian Bullseye
• Install salt-minion
• Run state-apply

Expected behavior
I expect that the password works without manual interaction.

Screenshots
If applicable, add screenshots to help explain your problem.

Versions Report

salt --versions-report

(Provided by running salt --versions-report. Please also mention any differences in master/minion versions.)

Salt Version:                                         
          Salt: 3004                                  
                                                      
Dependency Versions:                                  
          cffi: Not Installed                         
      cherrypy: Not Installed                         
      dateutil: 2.8.1                                 
     docker-py: Not Installed                         
         gitdb: 4.0.5                                 
     gitpython: 3.1.14                                
        Jinja2: 2.11.3                                
       libgit2: Not Installed                         
      M2Crypto: Not Installed                         
          Mako: Not Installed                         
       msgpack: 1.0.0                                 
  msgpack-pure: Not Installed                         
  mysql-python: Not Installed                         
     pycparser: Not Installed                         
      pycrypto: Not Installed                         
  pycryptodome: 3.9.7                                 
        pygit2: Not Installed                         
        Python: 3.9.2 (default, Feb 28 2021, 17:03:44)
  python-gnupg: Not Installed                         
        PyYAML: 5.3.1                                 
         PyZMQ: 20.0.0                                
         smmap: 4.0.0                                 
       timelib: Not Installed                         
       Tornado: 4.5.3                                 
           ZMQ: 4.3.4                                 
                                                      
System Versions:                                      
          dist: debian 11 bullseye                    
        locale: utf-8                                 
       machine: x86_64                                
       release: 5.10.0-11-amd64                       
        system: Linux                                 
       version: Debian GNU/Linux 11 bullseye          

Additional context
Minnion is running at Linux admin 5.10.0-11-amd64 #1 SMP Debian 5.10.92-1 (2022-01-18) x86_64 GNU/Linux
salt-minion 3002.6

[welcome]

Hi there! Welcome to the Salt Community! Thank you for making your first contribution. We have a lengthy process for issues and PRs. Someone from the Core Team will follow up as soon as possible. In the meantime, here’s some information that may help as you continue your Salt journey.
Please be sure to review our Code of Conduct. Also, check out some of our community resources including:

• Community Wiki
• Salt’s Contributor Guide
• Join our Community Slack
• IRC on LiberaChat
• Salt Project YouTube channel
• Salt Project Twitch channel

There are lots of ways to get involved in our community. Every month, there are around a dozen opportunities to meet with other contributors and the Salt Core team and collaborate in real time. The best way to keep track is by subscribing to the Salt Community Events Calendar.
If you have additional questions, email us at saltproject@vmware.com. We’re glad you’ve joined our community and look forward to doing awesome things with you!

[garethgreenaway]

@peterbaumert Thanks for the report. I was able to reproduce this when encode_password was the default value of False, but setting it to True the state worked as expected and I was still able to log in. One theory I had, after running the state can you check the permissions, eg. ls -l /etc/shadow*, of the shadow files?

[garethgreenaway]

@peterbaumert Just making sure you saw the question in the last comment.

[peterbaumert]

Hey sorry i actually didnt. Im currently in vacation and will get back to you next week.

[garethgreenaway]

@peterbaumert Just following up and seeing there was anymore feedback on this issue?

[garethgreenaway]

Closing this one out due to lack of activity, if the issue is still occurring please feel free to reopen the issue.