« Return to Thread: Change_Passwd 4.2e

Re: Change_Passwd 4.2e

by Steven Gonzales-3 :: Rate this Message:

Reply to Author | View in Thread

Paul Lesniewski wrote:

> Steven,
>
>   See attached.  Please send any replies onlist.
>
> Thanks,
>
>   Paul
>
> On Fri, May 22, 2009 at 10:28 AM, Steven Gonzales <gonzo@...> wrote:
>>>  > General Information:
>>>  > Fedora 11 Preview
>>>  > Apache 2.2.11, both user and group are apache
>>>  > PHP 5.2.9
>>>  >
>>>  > Directory Listing of the Plugin Directory (ls -laF)
>>>  > total 120
>>>  > drwxr-xr-x  3 root root    4096 2009-05-21 15:58 ./
>>>  > drwxr-xr-x 22 root root    4096 2009-05-21 12:51 ../
>>>  > -rwsr-x---  1 root apache 10744 2009-01-03 18:23 chpasswd*
>>>  > -rw-r--r--  1 root root    7290 2009-01-03 18:23 chpasswd.c
>>>  > -rw-r--r--  1 root root    1588 2009-05-21 15:54 config.php
>>>  > -rw-r--r--  1 root root    1587 2009-01-03 18:23 config.php.sample
>>>  > -rw-r--r--  1 root root   15802 2009-01-03 18:23 COPYING
>>>  > -rw-r--r--  1 root root     610 2009-01-03 18:23 exec_test.php
>>>  > -rw-r--r--  1 root root    2068 2009-01-03 18:23 functions.php
>>>  > -rw-r--r--  1 root root     114 2009-01-03 18:23 getpot
>>>  > -rw-r--r--  1 root root     466 2009-01-03 18:23 index.php
>>>  > -rw-r--r--  1 root root    2120 2009-01-03 18:23 INSTALL
>>>  > -rwxr-xr-x  1 root root    4322 2009-01-03 18:23 ldap-chpasswd*
>>>  > -rw-r--r--  1 root root    1018 2009-01-03 18:23
>>> ldap-chpasswd.cfg.sample
>>>  > drwxr-xr-x  3 root root    4096 2009-01-03 18:23 locale/
>>>  > -rw-r--r--  1 root root   11997 2009-01-03 18:23 options.php
>>>  > -rw-r--r--  1 root root    9119 2009-01-03 18:23 README
>>>  > -rw-r--r--  1 root root    1356 2009-01-03 18:23 setup.php
>>>  > -rw-r--r--  1 root root      19 2009-01-03 18:23 version
>>>  >
>>>  > $seeOutput results:
>>>  > Current password is incorrect
>>>  > Command output:
>>>  > Current password is incorrect
>>>  > Return code: 9
>>>  >
>>>  > $debug results:
>>>  > cd /usr/local/squirrelmail/www/plugins/change_passwd
>>>  > ../../plugins/change_passwd/chpasswd '<userid>' '<oldPasswd>'
>>>  > '<newPasswd>' 2>&1
>>>  >
>>>  > When run the above in a console, the result of these commands is:
>>>  > Current password is incorrect
>>>
>>> Are you sure you are really using the same username AND password that
>>> are in the /etc/passwd or /etc/shadow file??
>> If you are referring to user input, then yes the userid and password are
>> in /etc/passwd and /etc/shadow.  If you are referring to the program, I
>> can only assume that it is so since the variables cited below point to
>> the correct files.
>>
>>>  > Squirrelmail 1.4.17 was installed per the instruction set:
>>>  > http://squirrelmail.org/docs/admin/admin-3.html#ss3.2
>>>  > starting at "Prepare SquirrelMail directories" since the other
>>>  > requirements were already installed from source.
>>>
>>> Doesn't sound like a SquirrelMail issue.
>> I agree since it and the Local_autorespond_forward plugin is working
>> quite well.
>>
>>>  > Plugins installed and configured into Squirrelmail:
>>>  > Compatibility 2.0.14-1.0
>>>  > Local_autorespond_forward 3.0.1-1.4.0
>>>  > Change_passwd 4.2e
>>>
>>> I've never heard of this version.  I only support versions that I have
>>> produced, so you might talk to the author of this plugin version.
>> Fair enough.
>>
>>>  > The CompatibilityDependencies list shows that change_passwd requires
>>>  > compatibility 1.x, but that "an updated version that works with 2.x is
>>>  > available from the author."  The latest version I have been able to find
>>>  > is 4.2e which was released January 4, 2009, per
>>>  > http://www.linuxmail.info/change_passwd/.
>>>
>>> Then you should ask for help there.  "Available from the author"
>>> usually means you have to ask the author for a copy of that "updated
>>> version."  I can give you mine.
>> Again, fair enough.  If you have a version of the plugin which works
>> with Compatibility 2.0.14-1.0, I would love to know how to get it.
>> Until then, I think that the line 165 advice below will be moot.
>>>  > I have searched the email lists (all four) and found something from Mr.
>>>  > Lesniewski that states to recompile the binary.  Per the head of the C
>>>  > file, I have even attempted a recompile of the code using both versions
>>>  > contained with the C file... as well as compiling per the bottom of:
>>>  >
>>>  > http://www.linuxmail.info/squirrelmail-change-password-howto/
>>>  >
>>>  > The C file does show that PASSWD is /etc/passwd and SHADOW is
>>>  > /etc/shadow, both of which are correct.
>>>
>>> Again, I don't know what the code is you have, but in my code, in
>>> chpasswd.c around line 165, I see this:
>>>
>>>                                         printf("Current password is
>>> incorrect\n");
>>>                                         //printf("Current password
>>> \"%s\" is incorrect; encrypted, it is \"%s\", but encrypting the given
>>> one results in \"%s\"\n", Old_pw, WOld_pw, (char *)crypt(Old_pw,
>>> WOld_pw));
>>>
>>> Try uncommenting the second line and see what you get while doublt
>>> checking against the users in the password file.  The problem is that
>>> your version of the program is getting something else from the
>>> password file other than what you are giving it.


With Change_passwd-4.3beta1-1.2.8


Trying the binary tarballed with the plugin:

Without $seeOutput or $debug
Your current password is not correct


With $seeOutput:
Your current password is not correct
Command output:
Current password is incorrect
Return code: 9


With $debug:
Permissions of chpasswd executable are: 104750

chpasswd has group ownership: apache
Your web server is running under group: apache

chpasswd is owned by: root

To test the chpasswd utility from the command line, do this:

cd /usr/local/squirrelmail/www/plugins/change_passwd
../../plugins/change_passwd/chpasswd '<userid>' '<oldPass>' '<newPass>' 2>&1

The results of the commandline are:
Your current password is not correct

----------------------------------------

Trying with compiled binary with line 165 per the head of the C source
file:  Same results as above

----------------------------------------

Trying with compiled binary with line 166:

Without $seeOutput or $debug
Your current password is not correct


With $seeOutput:
Your current password is not correct
Command output:
Current password "Urp1eH1Ur8FUDrJOkV9euwkcz8hL4r9cqjXjm6d//T.H.DS." is
incorrect; encrypted, it is
"$6$UfewSJUs$FtqVH/gkfh7wcrL/RCEw02blat1AAujDbsAvVvUrp1eH1Ur8FUDrJOkV9euwkcz8hL4r9cqjXjm6d//T.H.DS.",
but encrypting the given one results in
"$6$UfewSJUs$ZrKKZV4Gx/fh8eljjuDmKDwJf3bN3KCROx2RzWIdUJoZUZ08I1tkhcfdHsRQBPocN1Rgsc04lQZUs.y7c4gv01"
Return code: 9


With $debug:
Permissions of chpasswd executable are: 104750

chpasswd has group ownership: apache
Your web server is running under group: apache

chpasswd is owned by: root

To test the chpasswd utility from the command line, do this:

cd /usr/local/squirrelmail/www/plugins/change_passwd
../../plugins/change_passwd/chpasswd '<userid>' '<oldPass>' '<newPass>' 2>&1

The results of the commandline are:
Current password "Urp1eH1Ur8FUDrJOkV9euwkcz8hL4r9cqjXjm6d//T.H.DS." is
incorrect; encrypted, it is
"$6$UfewSJUs$FtqVH/gkfh7wcrL/RCEw02blat1AAujDbsAvVvUrp1eH1Ur8FUDrJOkV9euwkcz8hL4r9cqjXjm6d//T.H.DS.",
but encrypting the given one results in
"$6$UfewSJUs$ZrKKZV4Gx/fh8eljjuDmKDwJf3bN3KCROx2RzWIdUJoZUZ08I1tkhcfdHsRQBPocN1Rgsc04lQZUs.y7c4gv01"

----------------------------------------

I have ssh'ed into the mail server and changed the password to the new
one and then back to the old one successfully.  I have also performed a
passwd on the user in question so that a new MD5 for the original
password would be generated for this user.  The results (encryption
notwithstanding) are the same.


>>>
>>>  > When the error occurs, nothing changes in either /var/log/messages,
>>>  > /var/log/maillog, or /var/log/secure.
>>>  >
>>>  > I have turned off SELinux prior to troubleshooting this concern.
>>>  >
>>>  > Is there something I'm missing?
>>>  >
>>>  > Many thanks for your time and help with this.
>>>
>>>
>> Reiteration of the thanks for your time.
>>
>> Steven

------------------------------------------------------------------------------
Register Now for Creativity and Technology (CaT), June 3rd, NYC. CaT
is a gathering of tech-side developers & brand creativity professionals. Meet
the minds behind Google Creative Lab, Visual Complexity, Processing, &
iPhoneDevCamp asthey present alongside digital heavyweights like Barbarian
Group, R/GA, & Big Spaceship. http://www.creativitycat.com 
-----
squirrelmail-plugins mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: squirrelmail-plugins@...
List archives: http://news.gmane.org/gmane.mail.squirrelmail.plugins
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-plugins

 « Return to Thread: Change_Passwd 4.2e