<?xml version="1.0" encoding="UTF-8" ?>

<bugzilla version="5.2"
          urlbase="https://bugzilla.altlinux.org/"
          
          maintainer="jenya@basealt.ru"
>

    <bug>
          <bug_id>1054</bug_id>
          
          <creation_ts>2002-07-04 20:50:07 +0400</creation_ts>
          <short_desc>fails if using md5-hashes</short_desc>
          <delta_ts>2003-08-25 15:18:31 +0400</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>4</classification_id>
          <classification>Development</classification>
          <product>Sisyphus</product>
          <component>passwd</component>
          <version>unstable</version>
          <rep_platform>all</rep_platform>
          <op_sys>Linux</op_sys>
          <bug_status>CLOSED</bug_status>
          <resolution>NOTABUG</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords></keywords>
          <priority>P4</priority>
          <bug_severity>critical</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="imz">vanyaz</reporter>
          <assigned_to name="Dmitry V. Levin">ldv</assigned_to>
          <cc>ldv</cc>
    
    <cc>placeholder</cc>
          
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>1003</commentid>
    <comment_count>0</comment_count>
    <who name="imz">vanyaz</who>
    <bug_when>2002-07-04 20:50:07 +0400</bug_when>
    <thetext>I switch to md5-hashing by replacing \&amp;quot;prefix=$2a$\&amp;quot; in /etc/pam.d/system-auth with \&amp;quot;md5\&amp;quot;, create a new user and try to set a password for him. passwd (run under root) fails to do this:

Enter new password: 
Re-type new password: 
passwd: Memory buffer error.

(And with  \&amp;quot;prefix=$2a$\&amp;quot; it works.)

In syslog-messages we can see this:
Jul  4 20:37:28 shamrock pam_tcb[18898]: crypt_gensalt_ra: Invalid argument

---
use the attached /etc/pam.d/system-auth

$ useradd t
$ passwd t

You can now choose the new password or passphrase.

A valid password should be a mix of upper and lower case letters,
digits and other characters.  You can use an 8 character long
password with characters from at least 3 of these 4 classes, or
a 7 character long password containing characters from all the
classes.  Characters that form a common pattern are discarded by
the check.

A passphrase should be of at least 3 words, 12 to 40 characters
long and contain enough different characters.

Alternatively, if noone else can see your terminal now, you can
pick this as your password: \&amp;quot;format_behave&amp;amp;exempt\&amp;quot;.

Enter new password: 
Re-type new password: 
passwd: Memory buffer error.
$ 

---
# rpm -qa passwd \&apos;*tcb*\&apos; \&apos;*pam*\&apos; glibc | sort -u               
glibc-2.2.5-alt10
libpam-0.75-alt15
libtcb-0.9.7.1-alt1
nss_tcb-0.9.7.1-alt1
pam-0.75-alt15
pam-config-1.1.2-alt1
pam_console-0.75-alt15
pam_passwdqc-0.4-alt3
pam_tcb-0.9.7.1-alt1
pam_userpass-0.5-alt3
passwd-1.0.0-alt1
tcb-utils-0.9.7.1-alt1# rpm -qa passwd \&apos;*tcb*\&apos; \&apos;*pam*\&apos; glibc | sort -u | xargs rpm -V
S.5....T c /etc/pam.d/system-auth



</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>3835</commentid>
    <comment_count>1</comment_count>
    <who name="Dmitry V. Levin">ldv</who>
    <bug_when>2002-07-15 15:25:05 +0400</bug_when>
    <thetext>There are no bug at all, neither in \&amp;quot;passwd\&amp;quot; nor in \&amp;quot;pam_tcb\&amp;quot; or in \&amp;quot;libcrypt\&amp;quot;.

Every time you change password hashing algorithm for pam_tcb, please ensure you do it right way; for example, change of \&amp;quot;prefix\&amp;quot; parameter also requires update of \&amp;quot;count\&amp;quot; parameter.
</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>7200</commentid>
    <comment_count>2</comment_count>
    <who name="Dmitry V. Levin">ldv</who>
    <bug_when>2002-07-15 15:25:05 +0400</bug_when>
    <thetext>There are no bug at all, neither in \&amp;quot;passwd\&amp;quot; nor in \&amp;quot;pam_tcb\&amp;quot; or in \&amp;quot;libcrypt\&amp;quot;.

Every time you change password hashing algorithm for pam_tcb, please ensure you do it right way; for example, change of \&amp;quot;prefix\&amp;quot; parameter also requires update of \&amp;quot;count\&amp;quot; parameter.
</thetext>
  </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="0"
              isprivate="0"
          >
            <attachid>93</attachid>
            <date>2002-07-04 20:50:07 +0400</date>
            <delta_ts>2002-07-04 20:50:07 +0400</delta_ts>
            <desc>0001054-system-auth</desc>
            <filename>0001054-system-auth</filename>
            <type>application/octet-stream</type>
            <size>0</size>
            <attacher name="imz">vanyaz</attacher>
            
              <data encoding="base64"></data>

          </attachment>
      

    </bug>

</bugzilla>