apt-get dist-upgrade decided to install citadel-server (no I didn't know what it was) for who-knows-what reason.
Install created a new publicly listening service (never a good thing security-wise)
Install created a new user & group
an immediate apt-get purge citadel-server failed to back out the user,group,extra directories in /var
*** Please consider answering these questions, where appropriate ***
* What led up to the situation?
* What exactly did you do (or not do) that was effective (or
* What was the outcome of this action?
* What outcome did you expect instead?