[tpop3d-discuss] auth_passwd problems with 1.5.1

[Travis Miller]

I already did, check my first email again. :)

Here is something interesting, from auth_passwd.c, I added tiny bit of 
debugging:

     /* Now we need to authenticate the user; we will leave finding the
      * mailspool for later. */

     printf("Pwd compare: %s => %s => %s\n", pass, crypt(pass, 
user_passwd), user_passwd);

     if (!strcmp(crypt(pass, user_passwd), user_passwd)) {
         a = authcontext_new(pw->pw_uid, use_gid ? gid : pw->pw_gid, 
NULL, NULL, pw->pw_dir);
     }


When I run tpop3d I get:
root@mailtest:/home/test/tpop3d-1.5.1# ./tpop3d -v -d -f /etc/tpop3d.conf.t
parse_listeners: listening on address 127.0.0.1:111
1 authentication drivers successfully loaded
net_loop: tpop3d version 1.5.1 successfully started
connection_sendresponse: client [5]127.0.0.1/testserver: sent `+OK 
<6cefb803a0f4e22671213aec91b09411@testserver>'
listeners_post_select: client [5]127.0.0.1/testserver: connected to 
local address 127.0.0.1:111
connection_parsecommand: client [5]127.0.0.1/testserver: received `user 
test'
connection_sendresponse: client [5]127.0.0.1/testserver: sent `+OK Tell 
me your password.'
connection_parsecommand: client [5]127.0.0.1/testserver: received `pass 
[...]'

  --- HERE ---
Pwd compare: testing => $1OMYGVcfhzuI => $1$o9UzF.MI$32/a2Jf/ExrQJoNFCshVl1
  ------------

connection_sendresponse: client [5]127.0.0.1/testserver: sent `-ERR 
Lies! Try again!'
connection_do: client `[5]127.0.0.1/testserver': username `test': 1 
authentication failures
net_loop: terminating on signal 2
root@mailtest:/home/test/tpop3d-1.5.1#


crypt() doesn't seem to be doing what it should be.

- Travis


Chris Lightfoot wrote:
> On Wed, Aug 20, 2003 at 01:58:11PM -0500, Travis Miller wrote:
> 
>>Yes, as far as I am aware.  The are both use shadow passwords and do not 
>> use PAM.
>>
>>Also, I think I forgot to provide my configuration file:
>>
>>listen-address: 127.0.0.1:111(testserver)
>>max-children: 10
>>timeout-seconds: 60
>>mailbox: bsd:/var/spool/mail/$(user)
>>auth-passwd-enable: yes
>>auth-passwd-mail-group: nogroup
> 
> 
> Hmm. Can you try running tpop3d with the -v option, and
> see what diagnostics it logs then?
>