little improvement in security/pam-mysql

Ruslan Savchenko savrus at mexmat.net
Tue Mar 7 21:50:01 UTC 2006


Hello!

I had a problem with using md5 passwords with this port (not crypt()ed
md5).

When I tried to set crypt=md5, I saw message

Mar  3 17:00:24 ssh login: pam_mysql - non-crypt()ish MD5 hash is not supported 
in this build.


Looking throw source shows that it depends on HAVE_PAM_MYSQL_MD5_DATA
definition. One way to get it defined is to have HAVE_MD5DATA defined
(and MD5Data() in md5.h). FreeBSD's sys/md5.h has MD5Data(), but no
HAVE_MD5DATA. If HAVE_MD5DATA is defined in pam_mysql.c md5 passwords
work well, so one way to fix this is to apply attached patch to
pam_mysql.c 


This looks like pr, but should I send it on such a problem? I'm
waiting for answer.



uname -a

FreeBSD shadow 5.4-RELEASE-p7 FreeBSD 5.4-RELEASE-p7 #0: Sun Sep 25
15:51:58 MSD 2005     root at boo.fds.:/usr/obj/usr/src/sys/BOO  i386


pkg_info -aI

bash-3.0.16_1       The GNU Project's Bourne Again SHell
emacs-21.3_8        GNU editing macros
gettext-0.14.5      GNU gettext package
gkrellm-2.2.7       A GTK based system monitor
glib-1.2.10_11      Some useful routines of C programming (previous stable vers
glib-2.6.6          Some useful routines of C programming (current stable versi
leim-21.3_1         Libraries of (GNU) Emacs Input Method
libiconv-1.9.2_1    A character set conversion library
libnss-mysql-1.5    NSS module using a MySQL database for backend
mc-4.6.1_2          Midnight Commander, a free Norton Commander Clone
mysql-client-4.1.14 Multithreaded SQL database (client)
nss_ldap-1.239      RFC 2307 NSS module
openldap-client-2.2.28 Open source LDAP client implementation
pam_ldap-1.8.0      A pam module for authenticating with LDAP
pam_mkhomedir-0.1   Create HOME with a PAM module on demand
pam_mysql-0.6.2     A pam module for authenticating with MySQL
perl-5.8.7          Practical Extraction and Report Language
pkgconfig-0.17.2    A utility to retrieve information about installed libraries
-------------- next part --------------
--- pam_mysql.c.old	Tue Mar  7 21:54:04 2006
+++ pam_mysql.c	Tue Mar  7 21:55:56 2006
@@ -121,6 +121,7 @@
 
 #ifndef HAVE_OPENSSL
 #ifdef HAVE_MD5_H
+#define HAVE_MD5DATA
 #include <md5.h>
 #endif
 


More information about the freebsd-ports mailing list