Change_Passwd 4.2e
|
View:
New views
6 Messages
—
Rating Filter:
Alert me
|
 |
Change_Passwd 4.2e
by Steven Gonzales-3
::
Rate this Message:
Hello all.
General Information: Fedora 11 Preview Apache 2.2.11, both user and group are apache PHP 5.2.9 Directory Listing of the Plugin Directory (ls -laF) total 120 drwxr-xr-x 3 root root 4096 2009-05-21 15:58 ./ drwxr-xr-x 22 root root 4096 2009-05-21 12:51 ../ -rwsr-x--- 1 root apache 10744 2009-01-03 18:23 chpasswd* -rw-r--r-- 1 root root 7290 2009-01-03 18:23 chpasswd.c -rw-r--r-- 1 root root 1588 2009-05-21 15:54 config.php -rw-r--r-- 1 root root 1587 2009-01-03 18:23 config.php.sample -rw-r--r-- 1 root root 15802 2009-01-03 18:23 COPYING -rw-r--r-- 1 root root 610 2009-01-03 18:23 exec_test.php -rw-r--r-- 1 root root 2068 2009-01-03 18:23 functions.php -rw-r--r-- 1 root root 114 2009-01-03 18:23 getpot -rw-r--r-- 1 root root 466 2009-01-03 18:23 index.php -rw-r--r-- 1 root root 2120 2009-01-03 18:23 INSTALL -rwxr-xr-x 1 root root 4322 2009-01-03 18:23 ldap-chpasswd* -rw-r--r-- 1 root root 1018 2009-01-03 18:23 ldap-chpasswd.cfg.sample drwxr-xr-x 3 root root 4096 2009-01-03 18:23 locale/ -rw-r--r-- 1 root root 11997 2009-01-03 18:23 options.php -rw-r--r-- 1 root root 9119 2009-01-03 18:23 README -rw-r--r-- 1 root root 1356 2009-01-03 18:23 setup.php -rw-r--r-- 1 root root 19 2009-01-03 18:23 version $seeOutput results: Current password is incorrect Command output: Current password is incorrect Return code: 9 $debug results: cd /usr/local/squirrelmail/www/plugins/change_passwd ../../plugins/change_passwd/chpasswd '<userid>' '<oldPasswd>' '<newPasswd>' 2>&1 When run the above in a console, the result of these commands is: Current password is incorrect Squirrelmail 1.4.17 was installed per the instruction set: http://squirrelmail.org/docs/admin/admin-3.html#ss3.2 starting at "Prepare SquirrelMail directories" since the other requirements were already installed from source. Plugins installed and configured into Squirrelmail: Compatibility 2.0.14-1.0 Local_autorespond_forward 3.0.1-1.4.0 Change_passwd 4.2e The CompatibilityDependencies list shows that change_passwd requires compatibility 1.x, but that "an updated version that works with 2.x is available from the author." The latest version I have been able to find is 4.2e which was released January 4, 2009, per http://www.linuxmail.info/change_passwd/. I have searched the email lists (all four) and found something from Mr. Lesniewski that states to recompile the binary. Per the head of the C file, I have even attempted a recompile of the code using both versions contained with the C file... as well as compiling per the bottom of: http://www.linuxmail.info/squirrelmail-change-password-howto/ The C file does show that PASSWD is /etc/passwd and SHADOW is /etc/shadow, both of which are correct. When the error occurs, nothing changes in either /var/log/messages, /var/log/maillog, or /var/log/secure. I have turned off SELinux prior to troubleshooting this concern. Is there something I'm missing? Many thanks for your time and help with this. Respectfully, Steven Gonzales ------------------------------------------------------------------------------ Register Now for Creativity and Technology (CaT), June 3rd, NYC. CaT is a gathering of tech-side developers & brand creativity professionals. Meet the minds behind Google Creative Lab, Visual Complexity, Processing, & iPhoneDevCamp asthey present alongside digital heavyweights like Barbarian Group, R/GA, & Big Spaceship. http://www.creativitycat.com ----- squirrelmail-plugins mailing list Posting guidelines: http://squirrelmail.org/postingguidelines List address: squirrelmail-plugins@... List archives: http://news.gmane.org/gmane.mail.squirrelmail.plugins List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-plugins |
|
|
Re: Change_Passwd 4.2e
by Paul Lesniewski
::
Rate this Message:
> General Information:
> Fedora 11 Preview > Apache 2.2.11, both user and group are apache > PHP 5.2.9 > > Directory Listing of the Plugin Directory (ls -laF) > total 120 > drwxr-xr-x 3 root root 4096 2009-05-21 15:58 ./ > drwxr-xr-x 22 root root 4096 2009-05-21 12:51 ../ > -rwsr-x--- 1 root apache 10744 2009-01-03 18:23 chpasswd* > -rw-r--r-- 1 root root 7290 2009-01-03 18:23 chpasswd.c > -rw-r--r-- 1 root root 1588 2009-05-21 15:54 config.php > -rw-r--r-- 1 root root 1587 2009-01-03 18:23 config.php.sample > -rw-r--r-- 1 root root 15802 2009-01-03 18:23 COPYING > -rw-r--r-- 1 root root 610 2009-01-03 18:23 exec_test.php > -rw-r--r-- 1 root root 2068 2009-01-03 18:23 functions.php > -rw-r--r-- 1 root root 114 2009-01-03 18:23 getpot > -rw-r--r-- 1 root root 466 2009-01-03 18:23 index.php > -rw-r--r-- 1 root root 2120 2009-01-03 18:23 INSTALL > -rwxr-xr-x 1 root root 4322 2009-01-03 18:23 ldap-chpasswd* > -rw-r--r-- 1 root root 1018 2009-01-03 18:23 ldap-chpasswd.cfg.sample > drwxr-xr-x 3 root root 4096 2009-01-03 18:23 locale/ > -rw-r--r-- 1 root root 11997 2009-01-03 18:23 options.php > -rw-r--r-- 1 root root 9119 2009-01-03 18:23 README > -rw-r--r-- 1 root root 1356 2009-01-03 18:23 setup.php > -rw-r--r-- 1 root root 19 2009-01-03 18:23 version > > $seeOutput results: > Current password is incorrect > Command output: > Current password is incorrect > Return code: 9 > > $debug results: > cd /usr/local/squirrelmail/www/plugins/change_passwd > ../../plugins/change_passwd/chpasswd '<userid>' '<oldPasswd>' > '<newPasswd>' 2>&1 > > When run the above in a console, the result of these commands is: > Current password is incorrect Are you sure you are really using the same username AND password that are in the /etc/passwd or /etc/shadow file?? > Squirrelmail 1.4.17 was installed per the instruction set: > http://squirrelmail.org/docs/admin/admin-3.html#ss3.2 > starting at "Prepare SquirrelMail directories" since the other > requirements were already installed from source. Doesn't sound like a SquirrelMail issue. > Plugins installed and configured into Squirrelmail: > Compatibility 2.0.14-1.0 > Local_autorespond_forward 3.0.1-1.4.0 > Change_passwd 4.2e I've never heard of this version. I only support versions that I have produced, so you might talk to the author of this plugin version. > The CompatibilityDependencies list shows that change_passwd requires > compatibility 1.x, but that "an updated version that works with 2.x is > available from the author." The latest version I have been able to find > is 4.2e which was released January 4, 2009, per > http://www.linuxmail.info/change_passwd/. Then you should ask for help there. "Available from the author" usually means you have to ask the author for a copy of that "updated version." I can give you mine. > I have searched the email lists (all four) and found something from Mr. > Lesniewski that states to recompile the binary. Per the head of the C > file, I have even attempted a recompile of the code using both versions > contained with the C file... as well as compiling per the bottom of: > > http://www.linuxmail.info/squirrelmail-change-password-howto/ > > The C file does show that PASSWD is /etc/passwd and SHADOW is > /etc/shadow, both of which are correct. Again, I don't know what the code is you have, but in my code, in chpasswd.c around line 165, I see this: printf("Current password is incorrect\n"); //printf("Current password \"%s\" is incorrect; encrypted, it is \"%s\", but encrypting the given one results in \"%s\"\n", Old_pw, WOld_pw, (char *)crypt(Old_pw, WOld_pw)); Try uncommenting the second line and see what you get while doublt checking against the users in the password file. The problem is that your version of the program is getting something else from the password file other than what you are giving it. > When the error occurs, nothing changes in either /var/log/messages, > /var/log/maillog, or /var/log/secure. > > I have turned off SELinux prior to troubleshooting this concern. > > Is there something I'm missing? > > Many thanks for your time and help with this. -- Paul Lesniewski SquirrelMail Team Please support Open Source Software by donating to SquirrelMail! http://squirrelmail.org/donate_paul_lesniewski.php ------------------------------------------------------------------------------ Register Now for Creativity and Technology (CaT), June 3rd, NYC. CaT is a gathering of tech-side developers & brand creativity professionals. Meet the minds behind Google Creative Lab, Visual Complexity, Processing, & iPhoneDevCamp asthey present alongside digital heavyweights like Barbarian Group, R/GA, & Big Spaceship. http://www.creativitycat.com ----- squirrelmail-plugins mailing list Posting guidelines: http://squirrelmail.org/postingguidelines List address: squirrelmail-plugins@... List archives: http://news.gmane.org/gmane.mail.squirrelmail.plugins List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-plugins |
|
|
|
|
|
|
|
|
Re: Change_Passwd 4.2e
by Paul Lesniewski
::
Rate this Message:
>>>> > General Information:
>>>> > Fedora 11 Preview >>>> > Apache 2.2.11, both user and group are apache >>>> > PHP 5.2.9 >>>> > >>>> > Directory Listing of the Plugin Directory (ls -laF) >>>> > total 120 >>>> > drwxr-xr-x 3 root root 4096 2009-05-21 15:58 ./ >>>> > drwxr-xr-x 22 root root 4096 2009-05-21 12:51 ../ >>>> > -rwsr-x--- 1 root apache 10744 2009-01-03 18:23 chpasswd* >>>> > -rw-r--r-- 1 root root 7290 2009-01-03 18:23 chpasswd.c >>>> > -rw-r--r-- 1 root root 1588 2009-05-21 15:54 config.php >>>> > -rw-r--r-- 1 root root 1587 2009-01-03 18:23 config.php.sample >>>> > -rw-r--r-- 1 root root 15802 2009-01-03 18:23 COPYING >>>> > -rw-r--r-- 1 root root 610 2009-01-03 18:23 exec_test.php >>>> > -rw-r--r-- 1 root root 2068 2009-01-03 18:23 functions.php >>>> > -rw-r--r-- 1 root root 114 2009-01-03 18:23 getpot >>>> > -rw-r--r-- 1 root root 466 2009-01-03 18:23 index.php >>>> > -rw-r--r-- 1 root root 2120 2009-01-03 18:23 INSTALL >>>> > -rwxr-xr-x 1 root root 4322 2009-01-03 18:23 ldap-chpasswd* >>>> > -rw-r--r-- 1 root root 1018 2009-01-03 18:23 >>>> ldap-chpasswd.cfg.sample >>>> > drwxr-xr-x 3 root root 4096 2009-01-03 18:23 locale/ >>>> > -rw-r--r-- 1 root root 11997 2009-01-03 18:23 options.php >>>> > -rw-r--r-- 1 root root 9119 2009-01-03 18:23 README >>>> > -rw-r--r-- 1 root root 1356 2009-01-03 18:23 setup.php >>>> > -rw-r--r-- 1 root root 19 2009-01-03 18:23 version >>>> > >>>> > $seeOutput results: >>>> > Current password is incorrect >>>> > Command output: >>>> > Current password is incorrect >>>> > Return code: 9 >>>> > >>>> > $debug results: >>>> > cd /usr/local/squirrelmail/www/plugins/change_passwd >>>> > ../../plugins/change_passwd/chpasswd '<userid>' '<oldPasswd>' >>>> > '<newPasswd>' 2>&1 >>>> > >>>> > When run the above in a console, the result of these commands is: >>>> > Current password is incorrect >>>> >>>> Are you sure you are really using the same username AND password that >>>> are in the /etc/passwd or /etc/shadow file?? >>> If you are referring to user input, then yes the userid and password are >>> in /etc/passwd and /etc/shadow. If you are referring to the program, I >>> can only assume that it is so since the variables cited below point to >>> the correct files. >>> >>>> > Squirrelmail 1.4.17 was installed per the instruction set: >>>> > http://squirrelmail.org/docs/admin/admin-3.html#ss3.2 >>>> > starting at "Prepare SquirrelMail directories" since the other >>>> > requirements were already installed from source. >>>> >>>> Doesn't sound like a SquirrelMail issue. >>> I agree since it and the Local_autorespond_forward plugin is working >>> quite well. >>> >>>> > Plugins installed and configured into Squirrelmail: >>>> > Compatibility 2.0.14-1.0 >>>> > Local_autorespond_forward 3.0.1-1.4.0 >>>> > Change_passwd 4.2e >>>> >>>> I've never heard of this version. I only support versions that I have >>>> produced, so you might talk to the author of this plugin version. >>> Fair enough. >>> >>>> > The CompatibilityDependencies list shows that change_passwd requires >>>> > compatibility 1.x, but that "an updated version that works with 2.x is >>>> > available from the author." The latest version I have been able to find >>>> > is 4.2e which was released January 4, 2009, per >>>> > http://www.linuxmail.info/change_passwd/. >>>> >>>> Then you should ask for help there. "Available from the author" >>>> usually means you have to ask the author for a copy of that "updated >>>> version." I can give you mine. >>> Again, fair enough. If you have a version of the plugin which works >>> with Compatibility 2.0.14-1.0, I would love to know how to get it. >>> Until then, I think that the line 165 advice below will be moot. >>>> > I have searched the email lists (all four) and found something from Mr. >>>> > Lesniewski that states to recompile the binary. Per the head of the C >>>> > file, I have even attempted a recompile of the code using both versions >>>> > contained with the C file... as well as compiling per the bottom of: >>>> > >>>> > http://www.linuxmail.info/squirrelmail-change-password-howto/ >>>> > >>>> > The C file does show that PASSWD is /etc/passwd and SHADOW is >>>> > /etc/shadow, both of which are correct. >>>> >>>> Again, I don't know what the code is you have, but in my code, in >>>> chpasswd.c around line 165, I see this: >>>> >>>> printf("Current password is >>>> incorrect\n"); >>>> //printf("Current password >>>> \"%s\" is incorrect; encrypted, it is \"%s\", but encrypting the given >>>> one results in \"%s\"\n", Old_pw, WOld_pw, (char *)crypt(Old_pw, >>>> WOld_pw)); >>>> >>>> Try uncommenting the second line and see what you get while doublt >>>> checking against the users in the password file. The problem is that >>>> your version of the program is getting something else from the >>>> password file other than what you are giving it. > > > With Change_passwd-4.3beta1-1.2.8 > > > Trying the binary tarballed with the plugin: > > Without $seeOutput or $debug > Your current password is not correct > > > With $seeOutput: > Your current password is not correct > Command output: > Current password is incorrect > Return code: 9 > > > With $debug: > Permissions of chpasswd executable are: 104750 > > chpasswd has group ownership: apache > Your web server is running under group: apache > > chpasswd is owned by: root > > To test the chpasswd utility from the command line, do this: > > cd /usr/local/squirrelmail/www/plugins/change_passwd > ../../plugins/change_passwd/chpasswd '<userid>' '<oldPass>' '<newPass>' 2>&1 > > The results of the commandline are: > Your current password is not correct > > ---------------------------------------- > > Trying with compiled binary with line 165 per the head of the C source > file: Same results as above > > ---------------------------------------- > > Trying with compiled binary with line 166: > > Without $seeOutput or $debug > Your current password is not correct > > > With $seeOutput: > Your current password is not correct > Command output: > Current password "Urp1eH1Ur8FUDrJOkV9euwkcz8hL4r9cqjXjm6d//T.H.DS." is > incorrect; encrypted, it is > "$6$UfewSJUs$FtqVH/gkfh7wcrL/RCEw02blat1AAujDbsAvVvUrp1eH1Ur8FUDrJOkV9euwkcz8hL4r9cqjXjm6d//T.H.DS.", > but encrypting the given one results in > "$6$UfewSJUs$ZrKKZV4Gx/fh8eljjuDmKDwJf3bN3KCROx2RzWIdUJoZUZ08I1tkhcfdHsRQBPocN1Rgsc04lQZUs.y7c4gv01" > Return code: 9 I'm not sure what $6$ is, but it looks like crypt-md5 (usually $1$). If local_autorespond_forward is working right (using suid backend, it can successfully create and update .forward files, etc.), then it's something funny with the chpasswd.c code (not surprising, since it's such a hack). As you can see, the crypt command seems to be returning unexpected results in change_passwd. You might be able to help narrow down why that happens by outputting the two arguments to crypt() in both change_passwd and local_autorespond_forward and run the scripts on the command line and see if there is any difference. change_passwd runs the password through some one-off code for input and "fixing" (hex decoding). You can try to comment out the fixpwd() calls around line 102 and see what that does. Showing your configure/make options for local_autorespond_forward could also be useful. Obviously at some point, the change_passwd script needs to be ditched in favor of something more robust like local_autorespond_forward. > With $debug: > Permissions of chpasswd executable are: 104750 > > chpasswd has group ownership: apache > Your web server is running under group: apache > > chpasswd is owned by: root > > To test the chpasswd utility from the command line, do this: > > cd /usr/local/squirrelmail/www/plugins/change_passwd > ../../plugins/change_passwd/chpasswd '<userid>' '<oldPass>' '<newPass>' 2>&1 > > The results of the commandline are: > Current password "Urp1eH1Ur8FUDrJOkV9euwkcz8hL4r9cqjXjm6d//T.H.DS." is > incorrect; encrypted, it is > "$6$UfewSJUs$FtqVH/gkfh7wcrL/RCEw02blat1AAujDbsAvVvUrp1eH1Ur8FUDrJOkV9euwkcz8hL4r9cqjXjm6d//T.H.DS.", > but encrypting the given one results in > "$6$UfewSJUs$ZrKKZV4Gx/fh8eljjuDmKDwJf3bN3KCROx2RzWIdUJoZUZ08I1tkhcfdHsRQBPocN1Rgsc04lQZUs.y7c4gv01" > > ---------------------------------------- > > I have ssh'ed into the mail server and changed the password to the new > one and then back to the old one successfully. I have also performed a > passwd on the user in question so that a new MD5 for the original > password would be generated for this user. The results (encryption > notwithstanding) are the same. > > >>>> >>>> > When the error occurs, nothing changes in either /var/log/messages, >>>> > /var/log/maillog, or /var/log/secure. >>>> > >>>> > I have turned off SELinux prior to troubleshooting this concern. >>>> > >>>> > Is there something I'm missing? >>>> > >>>> > Many thanks for your time and help with this. >>>> >>>> >>> Reiteration of the thanks for your time. >>> >>> Steven -- Paul Lesniewski SquirrelMail Team Please support Open Source Software by donating to SquirrelMail! http://squirrelmail.org/donate_paul_lesniewski.php ------------------------------------------------------------------------------ Register Now for Creativity and Technology (CaT), June 3rd, NYC. CaT is a gathering of tech-side developers & brand creativity professionals. Meet the minds behind Google Creative Lab, Visual Complexity, Processing, & iPhoneDevCamp as they present alongside digital heavyweights like Barbarian Group, R/GA, & Big Spaceship. http://p.sf.net/sfu/creativitycat-com ----- squirrelmail-plugins mailing list Posting guidelines: http://squirrelmail.org/postingguidelines List address: squirrelmail-plugins@... List archives: http://news.gmane.org/gmane.mail.squirrelmail.plugins List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-plugins |
|
|
Re: Change_Passwd 4.2e
by Steven Gonzales-3
::
Rate this Message:
Paul Lesniewski wrote: >>>>> > General Information: >>>>> > Fedora 11 Preview >>>>> > Apache 2.2.11, both user and group are apache >>>>> > PHP 5.2.9 >>>>> > >>>>> > Directory Listing of the Plugin Directory (ls -laF) >>>>> > total 120 >>>>> > drwxr-xr-x 3 root root 4096 2009-05-21 15:58 ./ >>>>> > drwxr-xr-x 22 root root 4096 2009-05-21 12:51 ../ >>>>> > -rwsr-x--- 1 root apache 10744 2009-01-03 18:23 chpasswd* >>>>> > -rw-r--r-- 1 root root 7290 2009-01-03 18:23 chpasswd.c >>>>> > -rw-r--r-- 1 root root 1588 2009-05-21 15:54 config.php >>>>> > -rw-r--r-- 1 root root 1587 2009-01-03 18:23 config.php.sample >>>>> > -rw-r--r-- 1 root root 15802 2009-01-03 18:23 COPYING >>>>> > -rw-r--r-- 1 root root 610 2009-01-03 18:23 exec_test.php >>>>> > -rw-r--r-- 1 root root 2068 2009-01-03 18:23 functions.php >>>>> > -rw-r--r-- 1 root root 114 2009-01-03 18:23 getpot >>>>> > -rw-r--r-- 1 root root 466 2009-01-03 18:23 index.php >>>>> > -rw-r--r-- 1 root root 2120 2009-01-03 18:23 INSTALL >>>>> > -rwxr-xr-x 1 root root 4322 2009-01-03 18:23 ldap-chpasswd* >>>>> > -rw-r--r-- 1 root root 1018 2009-01-03 18:23 >>>>> ldap-chpasswd.cfg.sample >>>>> > drwxr-xr-x 3 root root 4096 2009-01-03 18:23 locale/ >>>>> > -rw-r--r-- 1 root root 11997 2009-01-03 18:23 options.php >>>>> > -rw-r--r-- 1 root root 9119 2009-01-03 18:23 README >>>>> > -rw-r--r-- 1 root root 1356 2009-01-03 18:23 setup.php >>>>> > -rw-r--r-- 1 root root 19 2009-01-03 18:23 version >>>>> > >>>>> > $seeOutput results: >>>>> > Current password is incorrect >>>>> > Command output: >>>>> > Current password is incorrect >>>>> > Return code: 9 >>>>> > >>>>> > $debug results: >>>>> > cd /usr/local/squirrelmail/www/plugins/change_passwd >>>>> > ../../plugins/change_passwd/chpasswd '<userid>' '<oldPasswd>' >>>>> > '<newPasswd>' 2>&1 >>>>> > >>>>> > When run the above in a console, the result of these commands is: >>>>> > Current password is incorrect >>>>> >>>>> Are you sure you are really using the same username AND password that >>>>> are in the /etc/passwd or /etc/shadow file?? >>>> If you are referring to user input, then yes the userid and password are >>>> in /etc/passwd and /etc/shadow. If you are referring to the program, I >>>> can only assume that it is so since the variables cited below point to >>>> the correct files. >>>> >>>>> > Squirrelmail 1.4.17 was installed per the instruction set: >>>>> > http://squirrelmail.org/docs/admin/admin-3.html#ss3.2 >>>>> > starting at "Prepare SquirrelMail directories" since the other >>>>> > requirements were already installed from source. >>>>> >>>>> Doesn't sound like a SquirrelMail issue. >>>> I agree since it and the Local_autorespond_forward plugin is working >>>> quite well. >>>> >>>>> > Plugins installed and configured into Squirrelmail: >>>>> > Compatibility 2.0.14-1.0 >>>>> > Local_autorespond_forward 3.0.1-1.4.0 >>>>> > Change_passwd 4.2e >>>>> >>>>> I've never heard of this version. I only support versions that I have >>>>> produced, so you might talk to the author of this plugin version. >>>> Fair enough. >>>> >>>>> > The CompatibilityDependencies list shows that change_passwd requires >>>>> > compatibility 1.x, but that "an updated version that works with 2.x is >>>>> > available from the author." The latest version I have been able to find >>>>> > is 4.2e which was released January 4, 2009, per >>>>> > http://www.linuxmail.info/change_passwd/. >>>>> >>>>> Then you should ask for help there. "Available from the author" >>>>> usually means you have to ask the author for a copy of that "updated >>>>> version." I can give you mine. >>>> Again, fair enough. If you have a version of the plugin which works >>>> with Compatibility 2.0.14-1.0, I would love to know how to get it. >>>> Until then, I think that the line 165 advice below will be moot. >>>>> > I have searched the email lists (all four) and found something from Mr. >>>>> > Lesniewski that states to recompile the binary. Per the head of the C >>>>> > file, I have even attempted a recompile of the code using both versions >>>>> > contained with the C file... as well as compiling per the bottom of: >>>>> > >>>>> > http://www.linuxmail.info/squirrelmail-change-password-howto/ >>>>> > >>>>> > The C file does show that PASSWD is /etc/passwd and SHADOW is >>>>> > /etc/shadow, both of which are correct. >>>>> >>>>> Again, I don't know what the code is you have, but in my code, in >>>>> chpasswd.c around line 165, I see this: >>>>> >>>>> printf("Current password is >>>>> incorrect\n"); >>>>> //printf("Current password >>>>> \"%s\" is incorrect; encrypted, it is \"%s\", but encrypting the given >>>>> one results in \"%s\"\n", Old_pw, WOld_pw, (char *)crypt(Old_pw, >>>>> WOld_pw)); >>>>> >>>>> Try uncommenting the second line and see what you get while doublt >>>>> checking against the users in the password file. The problem is that >>>>> your version of the program is getting something else from the >>>>> password file other than what you are giving it. >> >> With Change_passwd-4.3beta1-1.2.8 >> >> >> Trying the binary tarballed with the plugin: >> >> Without $seeOutput or $debug >> Your current password is not correct >> >> >> With $seeOutput: >> Your current password is not correct >> Command output: >> Current password is incorrect >> Return code: 9 >> >> >> With $debug: >> Permissions of chpasswd executable are: 104750 >> >> chpasswd has group ownership: apache >> Your web server is running under group: apache >> >> chpasswd is owned by: root >> >> To test the chpasswd utility from the command line, do this: >> >> cd /usr/local/squirrelmail/www/plugins/change_passwd >> ../../plugins/change_passwd/chpasswd '<userid>' '<oldPass>' '<newPass>' 2>&1 >> >> The results of the commandline are: >> Your current password is not correct >> >> ---------------------------------------- >> >> Trying with compiled binary with line 165 per the head of the C source >> file: Same results as above >> >> ---------------------------------------- >> >> Trying with compiled binary with line 166: >> >> Without $seeOutput or $debug >> Your current password is not correct >> >> >> With $seeOutput: >> Your current password is not correct >> Command output: >> Current password "Urp1eH1Ur8FUDrJOkV9euwkcz8hL4r9cqjXjm6d//T.H.DS." is >> incorrect; encrypted, it is >> "$6$UfewSJUs$FtqVH/gkfh7wcrL/RCEw02blat1AAujDbsAvVvUrp1eH1Ur8FUDrJOkV9euwkcz8hL4r9cqjXjm6d//T.H.DS.", >> but encrypting the given one results in >> "$6$UfewSJUs$ZrKKZV4Gx/fh8eljjuDmKDwJf3bN3KCROx2RzWIdUJoZUZ08I1tkhcfdHsRQBPocN1Rgsc04lQZUs.y7c4gv01" >> Return code: 9 > > I'm not sure what $6$ is, but it looks like crypt-md5 (usually $1$). > If local_autorespond_forward is working right (using suid backend, it > can successfully create and update .forward files, etc.), then it's > something funny with the chpasswd.c code (not surprising, since it's > such a hack). As you can see, the crypt command seems to be returning > unexpected results in change_passwd. You might be able to help narrow > down why that happens by outputting the two arguments to crypt() in > both change_passwd and local_autorespond_forward and run the scripts > on the command line and see if there is any difference. change_passwd > runs the password through some one-off code for input and "fixing" > (hex decoding). You can try to comment out the fixpwd() calls around > line 102 and see what that does. Showing your configure/make options > for local_autorespond_forward could also be useful. Obviously at some > point, the change_passwd script needs to be ditched in favor of > something more robust like local_autorespond_forward. OK, after much deliberation, I decided to attempt a reinstall of the server. If I use the current versions of squirrelmail and compatibility as well as the beta version of the change_passwd plugin, it works. I must have misconfigured something in the previous install of squirrelmail; but now it works. I think the plugin is ready for primetime. Thanks much for your time and assistance in this matter. > >> With $debug: >> Permissions of chpasswd executable are: 104750 >> >> chpasswd has group ownership: apache >> Your web server is running under group: apache >> >> chpasswd is owned by: root >> >> To test the chpasswd utility from the command line, do this: >> >> cd /usr/local/squirrelmail/www/plugins/change_passwd >> ../../plugins/change_passwd/chpasswd '<userid>' '<oldPass>' '<newPass>' 2>&1 >> >> The results of the commandline are: >> Current password "Urp1eH1Ur8FUDrJOkV9euwkcz8hL4r9cqjXjm6d//T.H.DS." is >> incorrect; encrypted, it is >> "$6$UfewSJUs$FtqVH/gkfh7wcrL/RCEw02blat1AAujDbsAvVvUrp1eH1Ur8FUDrJOkV9euwkcz8hL4r9cqjXjm6d//T.H.DS.", >> but encrypting the given one results in >> "$6$UfewSJUs$ZrKKZV4Gx/fh8eljjuDmKDwJf3bN3KCROx2RzWIdUJoZUZ08I1tkhcfdHsRQBPocN1Rgsc04lQZUs.y7c4gv01" >> >> ---------------------------------------- >> >> I have ssh'ed into the mail server and changed the password to the new >> one and then back to the old one successfully. I have also performed a >> passwd on the user in question so that a new MD5 for the original >> password would be generated for this user. The results (encryption >> notwithstanding) are the same. >> >> >>>>> > When the error occurs, nothing changes in either /var/log/messages, >>>>> > /var/log/maillog, or /var/log/secure. >>>>> > >>>>> > I have turned off SELinux prior to troubleshooting this concern. >>>>> > >>>>> > Is there something I'm missing? >>>>> > >>>>> > Many thanks for your time and help with this. >>>>> >>>>> >>>> Reiteration of the thanks for your time. >>>> >>>> Steven > ------------------------------------------------------------------------------ Crystal Reports - New Free Runtime and 30 Day Trial Check out the new simplified licensing option that enables unlimited royalty-free distribution of the report engine for externally facing server and web deployment. http://p.sf.net/sfu/businessobjects ----- squirrelmail-plugins mailing list Posting guidelines: http://squirrelmail.org/postingguidelines List address: squirrelmail-plugins@... List archives: http://news.gmane.org/gmane.mail.squirrelmail.plugins List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-plugins |
| Free embeddable forum powered by Nabble | Forum Help |
