[Bug 633] Password authentication fails in HP-UX trusted mode due to DISABLE_SHADOW

bugzilla-daemon at mindrot.org bugzilla-daemon at mindrot.org
Fri Sep 5 17:40:01 EST 2003


http://bugzilla.mindrot.org/show_bug.cgi?id=633





------- Additional Comments From michael_steffens at hp.com  2003-09-05 17:40 -------
Attachment #383 doesn't fix it, unless

  if (spw = getprpwnam(pw->pw_name) != NULL)

is replaced by

  if ((spw = getprpwnam(pw->pw_name)) != NULL)

or the "!= NULL" comparison is omitted.

However, you might consider delegating pw hash retrieval to getspnam,
as this library function will transparently select the correct source
also when /etc/shadow shadowing (which has become available as addon
product for 11i) is in use.

getspnam is available on all versions since at least 10.20.

You may then drop all HP-UX specific stuff from function shadow_pw.
Function xcrypt will need to pick the correct hashing method (crypt
vs. bigcrypt) based on the result of iscomsec(), just the way it
does now. No change required on that part.



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.




More information about the openssh-bugs mailing list