Trouble with crypt(3) in pam module.

Pedro Fortuny Ayuso (Uniovi) pfortuny at gmail.com
Tue Jun 8 15:53:44 UTC 2010


Hi,

Don't want to pester, but:

It seems that DES_crypt, DES_fcrypt do not do exactly what GNU's
crypt(3) does when using salts with '$1$', etc... So I have had
to revert to using crypt_r.

I discovered that my Ubuntu DOES have the crypt_r, although it
does not appear in the man pages.

As for OpenSSL, you are right, but this module needs it anyway,
so, as long as the module was portable, DES_fcrypt should be
usable. BUT cf above.

Thanks again,

Pedro.




On Tue, Jun 08, 2010 at 09:50:02AM -0500, Anthony Iliopoulos wrote:
> Rejected by SPF lookup: (recv=llar.net.uniovi.es,
>  send-ip=130.39.6.46) Could not find a valid SPF record
> X-Virus-Scanned: clamav-milter 0.96.1 at relay001.lsu.edu
> X-Virus-Status: Clean
> References: <20100602150939.GY36349 at Pera.local>
>  <20100605190156.GM16798 at lsu.edu>
>  <AANLkTimwqT57LOrGjplUE2Wl8pMcQ0kggZ1KpJgXKMmb at mail.gmail.com>
>  <20100606131943.GO16798 at lsu.edu>
>  <AANLkTinL3W6GCCdyl-nGl_aCoPPqkKO88KUkzJbhvWuh at mail.gmail.com>
>  <20100606174756.GR16798 at lsu.edu> <20100607115146.GD380 at Pera.local>
> 
> Hey Pedro,
> 
> On Mon, Jun 07, 2010 at 01:51:48PM +0200, Pedro Fortuny Ayuso wrote:
> > Hi (Anthony),
> > 
> > This is just for completeness.
> 
> I appreciate you letting me know that it does work
> indeed.
> 
> > It has worked using both DES_crypt() and DES_fcrypt (this latter
> > option is the one I shall use).
> > 
> > I prefer using openssl's DES_fcrypt rather than crypt_r
> > because it may be more widespread (I found out an Ubuntu-9
> > does not have crypt_r, and it seems that BSD systems lack
> > it as well).
> 
> That's an interesting observation. I concur that by using
> the openssl library calls, will grant you more portability.
> 
> > Really, thank you VERY much. I was at my wit's end.
> > 
> > I owe you a beer.
> 
> It's my pleasure really, I think we all learn something
> from troubleshooting such issues.
> 
> Regards,
> Anthony

-- 
Pedro Fortuny Ayuso
http://pfortuny.net
EUITIG, Campus de Viesques, Gijon
Dpto. de Matematicas
Universidad de Oviedo
fortunypedro at uniovi.es




More information about the Pam-list mailing list