Your message dated Tue, 25 Apr 2006 10:47:17 -0700 with message-id <[EMAIL PROTECTED]> and subject line Bug#153428: fixed in tac-plus 1:4.0.4.alpha-13 has caused the attached Bug report to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what I am talking about this indicates a serious mail system misconfiguration somewhere. Please contact me immediately.) Debian bug tracking system administrator (administrator, Debian Bugs database)
--- Begin Message ---Package: tac-plus Version: F4.0.4.alpha-9.1 Severity: important Hello, under alpha architecture the encryption key seems to be always bad. This is the message I keep getting: 192.168.1.111 : Invalid AUTHEN/START packet (check keys) Tac_plus works only *without* setting a key=some_key in the configuration file. This has obvious security implications. The same setup works flawlessy under i386 architecture. I suspect it might be related to the 32/64 bit architecture difference in the procedures calculating the encryption (perhaps something tied to the different default int/longint lenght?). Happy patching :) Luca Filippi -- System Information Debian Release: 3.0 Kernel Version: Linux radius 2.4.19-rc1 #1 Wed Jul 10 16:31:58 CEST 2002 alpha unknown Versions of the packages tac-plus depends on: ii libc6.1 2.2.5-6 GNU C Library: Shared libraries and Timezone ii libldap2 2.0.23-6 OpenLDAP libraries. ii libpam0g 0.72-35 Pluggable Authentication Modules library ii libpgsql2 7.2.1-2 Shared library libpq.so.2 for PostgreSQL ii libwrap0 7.6-9 Wietse Venema's TCP wrappers library --- Begin /etc/tac-plus/tacacs.conf (modified conffile) key = prova user = lucaf { default service = permit login = cleartext prova1 } --- End /etc/tac-plus/tacacs.conf --- Begin /etc/tac-plus/tacacs.conf (modified conffile) key = prova user = lucaf { default service = permit login = cleartext prova1 } --- End /etc/tac-plus/tacacs.conf --- Begin /etc/init.d/tac-plus (modified conffile) #! /bin/sh PATH=/sbin:/bin:/usr/sbin:/usr/bin DAEMON=/usr/sbin/tac_plus NAME=tac_plus DESC="Tacacs+ server" CONFIG_FILE=/etc/tac-plus/tacacs.conf test -f $DAEMON || exit 0 test -f $CONFIG_FILE || { echo "There is no $CONFIG_FILE here" ; exit 1; } set -e case "$1" in start) echo -n "Starting $DESC: " start-stop-daemon --start --quiet --pidfile /var/run/$NAME.pid \ --exec $DAEMON -- -C $CONFIG_FILE -d 248 echo "$NAME." ;; stop) echo -n "Stopping $DESC: " start-stop-daemon --stop --quiet --pidfile /var/run/$NAME.pid \ --exec $DAEMON echo "$NAME." ;; #reload) # # The daemon AFAIK have problems reloading its # config files on the fly. When sending the signal # it dies trying to bind again to the socket. # So it has been disabled. # echo "Reloading $DESC configuration files." # start-stop-daemon --stop --signal FIXME --quiet --pidfile \ # /var/run/$NAME.pid --exec $DAEMON #;; restart|force-reload) # echo -n "Restarting $DESC: " start-stop-daemon --stop --quiet --pidfile \ /var/run/$NAME.pid --exec $DAEMON sleep 1 start-stop-daemon --start --quiet --pidfile \ /var/run/$NAME.pid --exec $DAEMON -- -C $CONFIG_FILE -d 248 echo "$NAME." ;; *) N=/etc/init.d/$NAME # echo "Usage: $N {start|stop|restart|reload|force-reload}" >&2 echo "Usage: $N {start|stop|restart|force-reload}" >&2 exit 1 ;; esac exit 0 --- End /etc/init.d/tac-plus
--- End Message ---
--- Begin Message ---Source: tac-plus Source-Version: 1:4.0.4.alpha-13 We believe that the bug you reported is fixed in the latest version of tac-plus, which is due to be installed in the Debian FTP archive: tac-plus_4.0.4.alpha-13.diff.gz to pool/main/t/tac-plus/tac-plus_4.0.4.alpha-13.diff.gz tac-plus_4.0.4.alpha-13.dsc to pool/main/t/tac-plus/tac-plus_4.0.4.alpha-13.dsc tac-plus_4.0.4.alpha-13_i386.deb to pool/main/t/tac-plus/tac-plus_4.0.4.alpha-13_i386.deb tac-plus_4.0.4.alpha.orig.tar.gz to pool/main/t/tac-plus/tac-plus_4.0.4.alpha.orig.tar.gz A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to [EMAIL PROTECTED], and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Eric Evans <[EMAIL PROTECTED]> (supplier of updated tac-plus package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing [EMAIL PROTECTED]) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.7 Date: Tue, 25 Apr 2006 11:56:42 -0500 Source: tac-plus Binary: tac-plus Architecture: source i386 Version: 1:4.0.4.alpha-13 Distribution: unstable Urgency: low Maintainer: Carlos Barros <[EMAIL PROTECTED]> Changed-By: Eric Evans <[EMAIL PROTECTED]> Description: tac-plus - TACACS+ authentication daemon Closes: 153428 285042 297965 333886 348237 355138 Changes: tac-plus (1:4.0.4.alpha-13) unstable; urgency=low . * Acknowledge NMU, (Closes: 297965). Thanks Anibal. * Reversioned to be more policy friendly, (Closes: #285042). * Dropped current patches in favor of those from Devrim Seral's version of tac-plus, (http://www.gazi.edu.tr/tacacs/), forward ported to F4.0.4.alpha, and applied with dpatch. * Updated build dependencies, (Closes: #333886). * Added myself to Uploaders, (Carlos Barros and I will co-maintain tac-plus). * Updated config.guess and config.sub, (Closes: #355138). * Delete tac_who.log on package purge, (Closes: #348237). * Extended the init script to allow option setting from default file, use "depends", "provides" and state in which runlevel runs. * Applied tac-chroot.patch from http://www.gazi.edu.tr. This provides tac_plus the ability to bind to a specific address, run in a chroot jail, and improves the mechanism for dropping privileges. * Patched to fix encryption key mismatch when running on 64 bit arches, (Closes: #153428). Files: c5d02fac4e9747292014e2e6a92a7d45 714 net extra tac-plus_4.0.4.alpha-13.dsc 9884bba5fc56ec4c574122c11754c3de 122880 net extra tac-plus_4.0.4.alpha.orig.tar.gz 7444f99a70d9649d02879d72d95f3390 83672 net extra tac-plus_4.0.4.alpha-13.diff.gz 213d34a2159725389e5d8d83bf96d999 108080 net extra tac-plus_4.0.4.alpha-13_i386.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.3 (GNU/Linux) iD8DBQFETl3t+DWPovKDPJMRAirPAJwPJzd4QGiQWkgGUdg74HNkGpwsewCgwHQj WW9GAZRV2ubOe6bRkx0pdZY= =8G+l -----END PGP SIGNATURE-----
--- End Message ---
