id	summary	reporter	owner	description	type	status	priority	milestone	component	resolution	keywords	cc	parents
768	"""Deploying MediaGoblin"" manual tells to ""adduser --system"", meaning no shell, then to ""su -"" without specifying a shell → cannot log in."	kumo		"There's something in [http://mediagoblin.readthedocs.org/en/latest/siteadmin/deploying.html#drop-privileges-for-mediagoblin the docs] that doesn't make much sense for me:

  ""No password will be assigned to this account, and '''you will not be able to log in as this user'''. To switch to this account, enter either:""

and then sudoes to mediagoblin user. Also, it says:
  ""Unless otherwise noted, the remainder of this document assumes that all operations are performed using this unpriviledged account.""

In my opinion, user mediagoblin should get shell permissions and when finished remove them. Otherwise, do everything as another user and at the end chown it all, but it may break something."	defect	closed	critical		documentation	fixed	login, password