Mailinglist Archive: opensuse-bugs (4068 mails)

< Previous Next >
[Bug 713727] changing password for local user not possible

Ludwig Nussel <lnussel@xxxxxxxxxx> changed:

What |Removed |Added
Priority|P5 - None |P2 - High
Group|novellonly |
CC| |security-team@xxxxxxx
AssignedTo|security-team@xxxxxxx |lnussel@xxxxxxxxxx
Severity|Normal |Major

--- Comment #6 from Ludwig Nussel <lnussel@xxxxxxxxxx> 2011-08-23 16:37:50 CEST
packaging mistake. The hack in the libxcrypt plugin to detect the file name of
the plugin doesn't work. dlopen is too smart and doesn't load a lib twice if
it's symlink points to the same file.

If the old password has id 2a compat mode turns it in 2x so
(symlink to is loaded. Then the new password is supposed to
get id 2y but dlopen doesn't actually load as it's the same
file as for 2x. So when the plugin looks at it's file name it sees 2x and
thinks it must generate a salt for 2x which is not possible.

Fix is to not install symlinks bug copies in the spec file of libxcrypt.

Configure bugmail:
------- You are receiving this mail because: -------
You are on the CC list for the bug.

< Previous Next >