[Bug 224098] security/pam_google_authenticator: Google Authenticator no longer displays QR codes

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=224098

            Bug ID: 224098
           Summary: security/pam_google_authenticator: Google
                    Authenticator no longer displays QR codes
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Some People
          Priority: ---
         Component: Individual Port(s)
          Assignee: freebsd-ports-bugs at FreeBSD.org
          Reporter: freebsdbugs at zofrex.com
                CC: jnlin at freebsd.cs.nctu.edu.tw
             Flags: maintainer-feedback?(jnlin at freebsd.cs.nctu.edu.tw)
                CC: jnlin at freebsd.cs.nctu.edu.tw

Overview:

The Google Authenticator command-line utility no longer displays QR codes when
generating new secrets.

Steps to reproduce:

Install both "libqrencode" and "pam_google_authenticator". Run
"google-authenticator" and answer the questions until it tells you your secret.

Expected:

To see a QR code displayed on the terminal.

Actual:

The secret is printed in text but no QR code is displayed.

Versions:

Tested on FreeBSD 10.3 and 11.1 using both ports and pkg-ng. I first
encountered this yesterday. The last time I'm reasonably confident this worked
was April this year.

Other notes:

Looking in my /usr/local/lib I see:

libqrencode.so
libqrencode.so.4
libqrencode.so.4.0.0

But looking at the source code for google-authenticator [1] (at the revision
specified in the Makefile, 195ddc1) I only see attempts to load:

libqrencode.so.2
libqrencode.so.3
libqrencode.dylib.3

So it looks like libqrencode has gotten ahead of what google-authenticator
expects. Looking at the latest version of google-authenticator [2] I see it
also loads .so.4, so I think this issue may be resolved to updating to the
latest version... but I have not tested if that works.

[1]:
https://github.com/google/google-authenticator/blob/195ddc135f8360254c459d037083ff46054df94f/libpam/google-authenticator.c#L206

[2]:
https://github.com/google/google-authenticator-libpam/blob/7365ed10d54393fb4c100cac063ae8edb744eac6/src/google-authenticator.c#L206
(at the time of writing)

-- 
You are receiving this mail because:
You are the assignee for the bug.