Re: [tpop3d-discuss] auth_passwd problems with 1.5.1

[Travis Miller]

I already did, check my first email again. :)

Here is something interesting, from auth_passwd.c, I added tiny bit of 
debugging:

    /* Now we need to authenticate the user; we will leave finding the
     * mailspool for later. */

    printf("Pwd compare: %s => %s => %s\n", pass, crypt(pass, 
user_passwd), user_passwd);

    if (!strcmp(crypt(pass, user_passwd), user_passwd)) {
        a = authcontext_new(pw->pw_uid, use_gid ? gid : pw->pw_gid, 
NULL, NULL, pw->pw_dir);
    }


When I run tpop3d I get:
address@hidden:/home/test/tpop3d-1.5.1# ./tpop3d -v -d -f /etc/tpop3d.conf.t
parse_listeners: listening on address 127.0.0.1:111
1 authentication drivers successfully loaded
net_loop: tpop3d version 1.5.1 successfully started
connection_sendresponse: client [5]127.0.0.1/testserver: sent `+OK 
<address@hidden>'
listeners_post_select: client [5]127.0.0.1/testserver: connected to 
local address 127.0.0.1:111
connection_parsecommand: client [5]127.0.0.1/testserver: received `user 
test'
connection_sendresponse: client [5]127.0.0.1/testserver: sent `+OK Tell 
me your password.'
connection_parsecommand: client [5]127.0.0.1/testserver: received `pass 
[...]'

 --- HERE ---
Pwd compare: testing => $1OMYGVcfhzuI => $1$o9UzF.MI$32/a2Jf/ExrQJoNFCshVl1
 ------------

connection_sendresponse: client [5]127.0.0.1/testserver: sent `-ERR 
Lies! Try again!'
connection_do: client `[5]127.0.0.1/testserver': username `test': 1 
authentication failures
net_loop: terminating on signal 2
address@hidden:/home/test/tpop3d-1.5.1#


crypt() doesn't seem to be doing what it should be.

- Travis


Chris Lightfoot wrote:
> On Wed, Aug 20, 2003 at 01:58:11PM -0500, Travis Miller wrote:
>
> > Yes, as far as I am aware.  The are both use shadow passwords and do not 
> > use PAM.
> >
> > Also, I think I forgot to provide my configuration file:
> >
> > listen-address: 127.0.0.1:111(testserver)
> > max-children: 10
> > timeout-seconds: 60
> > mailbox: bsd:/var/spool/mail/$(user)
> > auth-passwd-enable: yes
> > auth-passwd-mail-group: nogroup
>
>
> Hmm. Can you try running tpop3d with the -v option, and
> see what diagnostics it logs then?