Mailinglist Archive: opensuse-bugs (4068 mails)

< Previous Next >
[Bug 713727] changing password for local user not possible

https://bugzilla.novell.com/show_bug.cgi?id=713727

https://bugzilla.novell.com/show_bug.cgi?id=713727#c6


Ludwig Nussel <lnussel@xxxxxxxxxx> changed:

What |Removed |Added
----------------------------------------------------------------------------
Priority|P5 - None |P2 - High
Group|novellonly |
CC| |security-team@xxxxxxx
AssignedTo|security-team@xxxxxxx |lnussel@xxxxxxxxxx
Severity|Normal |Major

--- Comment #6 from Ludwig Nussel <lnussel@xxxxxxxxxx> 2011-08-23 16:37:50 CEST
---
packaging mistake. The hack in the libxcrypt plugin to detect the file name of
the plugin doesn't work. dlopen is too smart and doesn't load a lib twice if
it's symlink points to the same file.

If the old password has id 2a compat mode turns it in 2x so libxcrypt_2x.so.1
(symlink to libxcrypt_2a.so.1) is loaded. Then the new password is supposed to
get id 2y but dlopen doesn't actually load libxcrypt_2y.so.1 as it's the same
file as for 2x. So when the plugin looks at it's file name it sees 2x and
thinks it must generate a salt for 2x which is not possible.

Fix is to not install symlinks bug copies in the spec file of libxcrypt.

--
Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.

< Previous Next >