Crypt seems to fail about pam-mysql HOT 7 OPEN

No. Not my bug. It worked on an older Debian server. Nothing has changed in the scripts.

from pam-mysql.

Thanks for the report. pam_mysql_check_passwd() returning 6 is PAM_MYSQL_ERR_MISMATCH. Could the wrong crypt type be being used?

from pam-mysql.

Hi everyone :)

I've got the same issue on Debian 9 (Stretch) and 8 (Jessie).

After recompiling the module with more logs I've found something strange into the function pam_sm_authenticate (line 3729).

retval = pam_get_item(pamh, PAM_AUTHTOK, (PAM_GET_ITEM_CONST void **)&passwd); puts a null value into passwd when use_first_pass or try_first_pass options are enabled.

It seems that something has changed on libpam but I'm not able to found what exactly.
Sorry I'm not fluent in C :(

from pam-mysql.

Apparently I am having the same issue on CentOS 8 (but for example not on Alpine 3.11).

pam_mysql - pam_mysql_check_passwd() returning 6.
pam_mysql - pam_sm_authenticate() returning 7.

Made twice and triple sure, that the hashes match. (Using crypt=1 and $6 crypt() hashes.)

I then tried crypt=0 and plaintext password in the db, just to be sure:

pam_mysql - SELECT password FROM users WHERE username = 'user2'
pam_mysql - pam_mysql_check_passwd() returning 6.
pam_mysql - pam_mysql_sql_log() called.
pam_mysql - pam_mysql_sql_log() returning 0.
pam_mysql - pam_sm_authenticate() returning 7.

No success.

pam packages:

pam.x86_64                         1.3.1-4.el8                             @System   
pam-devel.x86_64                   1.3.1-4.el8                             @BaseOS

Edit:

Quickly tried the same on a clean CentOS 7 container, same problem:

May 16 09:45:02 235d7fc3f033 sshd[82]: pam_mysql - pam_mysql_check_passwd() returning 6.
May 16 09:45:02 235d7fc3f033 sshd[82]: pam_mysql - pam_mysql_sql_log() called.
May 16 09:45:02 235d7fc3f033 sshd[82]: pam_mysql - pam_mysql_sql_log() returning 0.
May 16 09:45:02 235d7fc3f033 sshd[82]: pam_mysql - pam_sm_authenticate() returning 7.

[root@235d7fc3f033 /]# yum list installed | grep pam
pam.x86_64                               1.1.8-23.el7                   @CentOS 
pam-devel.x86_64                         1.1.8-23.el7                   @base 

pam-MySQL is the latest version from this repository. Compilation and building the container image with docker is done like this:

FROM centos:7

RUN yum -y install openssh make nss-devel mariadb-devel automake \
                   libtool which diffutils file git openssh-server pam-devel \
    && git clone https://github.com/NigelCunningham/pam-MySQL.git \
    && cd pam-MySQL \
    && autoreconf -i \
    && ./configure \
    && make \
    && strip .libs/pam_mysql.so \
    && make install \
    && cd .. \
    && rm -rf pam-MySQL

EXPOSE 22

CMD ["sshd"]

from pam-mysql.

We now have pre-releases of a new version using Meson and including some unit tests. Would you please retry with this version?

from pam-mysql.

I have encountered this problem .. for me it turns out there was a single space after a line in the pam-mysql.conf config file.

from pam-mysql.

Hmm. Coud you provide an example, @m3t4tr0n?

from pam-mysql.