[tpop3d-discuss] auth_passwd problems with 1.5.1

Travis Miller tmiller at web-1hosting.net
Wed, 20 Aug 2003 14:34:18 -0500

I already did, check my first email again. :)

Here is something interesting, from auth_passwd.c, I added tiny bit of 

     /* Now we need to authenticate the user; we will leave finding the
      * mailspool for later. */

     printf("Pwd compare: %s => %s => %s\n", pass, crypt(pass, 
user_passwd), user_passwd);

     if (!strcmp(crypt(pass, user_passwd), user_passwd)) {
         a = authcontext_new(pw->pw_uid, use_gid ? gid : pw->pw_gid, 
NULL, NULL, pw->pw_dir);

When I run tpop3d I get:
root@mailtest:/home/test/tpop3d-1.5.1# ./tpop3d -v -d -f /etc/tpop3d.conf.t
parse_listeners: listening on address
1 authentication drivers successfully loaded
net_loop: tpop3d version 1.5.1 successfully started
connection_sendresponse: client [5] sent `+OK 
listeners_post_select: client [5] connected to 
local address
connection_parsecommand: client [5] received `user 
connection_sendresponse: client [5] sent `+OK Tell 
me your password.'
connection_parsecommand: client [5] received `pass 

  --- HERE ---
Pwd compare: testing => $1OMYGVcfhzuI => $1$o9UzF.MI$32/a2Jf/ExrQJoNFCshVl1

connection_sendresponse: client [5] sent `-ERR 
Lies! Try again!'
connection_do: client `[5]': username `test': 1 
authentication failures
net_loop: terminating on signal 2

crypt() doesn't seem to be doing what it should be.

- Travis

Chris Lightfoot wrote:
> On Wed, Aug 20, 2003 at 01:58:11PM -0500, Travis Miller wrote:
>>Yes, as far as I am aware.  The are both use shadow passwords and do not 
>> use PAM.
>>Also, I think I forgot to provide my configuration file:
>>max-children: 10
>>timeout-seconds: 60
>>mailbox: bsd:/var/spool/mail/$(user)
>>auth-passwd-enable: yes
>>auth-passwd-mail-group: nogroup
> Hmm. Can you try running tpop3d with the -v option, and
> see what diagnostics it logs then?