I just pushed a patch for cereal that I think should fix this problem (r1265). Hopefully we can push a new release soon.
I found the bug I filed against chpst related to this issue (#380261): http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=380261 Is the consensus that the current behavior of chpst is still insufficient, and that it should be able to process user and group names that are not in the /etc/{passwd,group}? Maybe we should file another bug against chpst. jamie.
signature.asc
Description: Digital signature