OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: [OT] PAM problem (was: PAM 'smtp' file question)

From: Andreas Winkelmann (mlawinkelmann.de)
Date: Tue Nov 20 2007 - 10:44:05 CST


On Dienstag, 20. November 2007, Michael Hallager wrote:

> I still need assistance with the following question-
>
> > Also, I now have it working with plaintext passwords in the DB (but then
> > again, I didn't need the hassle of PAM to achieve that) but with the
> > following:
> > crypt=1 md5=1
> > MD5 passwords still aren't working. (returning auth error)

What means "MD5 passwords"? Out of the Readme for the pam_mysql Plugin, don't
know if this fits to your version:

--------------------------------------------------------------------------------
crypt (plain)

    The method to encrypt the user's password:

       0 (or "plain") = No encryption. Passwords stored in plaintext.
                        HIGHLY DISCOURAGED.

       1 (or "Y") = Use crypt(3) function.

       2 (or "mysql") = Use MySQL PASSWORD() function. It is possible
                        that the encryption function used by PAM-MySQL
                        is different from that of the MySQL server, as
                        PAM-MySQL uses the function defined in MySQL's
                        C-client API instead of using PASSWORD() SQL function
                        in the query.

       3 (or "md5") = Use plain hex MD5.

       4 (or "sha1") = Use plain hex SHA1.

md5 (false)

    Use MD5 by default for crypt(3) hash. Only meaningful when crypt is
    set to "Y".
--------------------------------------------------------------------------------

There are two possible "MD5 passwords".

--
        Andreas