Package: libpam-duo
Version: 1.9.11-1
Severity: normal
Tags: ipv6

Dear Maintainer,

I'm trying to use libpam-duo on a server that has only IPv6
connectivity. Our authentication server has both IPv4 and IPv6
addresses:

xenh4:~# host auth.iserv.eu
auth.iserv.eu has address 88.198.205.8
auth.iserv.eu has IPv6 address 2a01:4f8:162:1247::108

Unfortunately, libpam-duo seems to ignore the IPv6 and always tries to
connect via IPv4:

xenh4:~# tshark -i eth0 -f "host auth.iserv.eu"

Capturing on 'eth0'
  1   0.000000      0.0.0.0 -> 88.198.205.8 TCP 74 49087→443 [SYN] Seq=0 
Win=29200 Len=0 MSS=1460 SACK_PERM=1 TSval=2874590986 TSecr=0 WS=64
  2   0.997362      0.0.0.0 -> 88.198.205.8 TCP 74 [TCP Retransmission] 
49087→443 [SYN] Seq=0 Win=29200 Len=0 MSS=1460 SACK_PERM=1 TSval=2874591236 
TSecr=0 WS=64
  3   3.001370      0.0.0.0 -> 88.198.205.8 TCP 74 [TCP Retransmission] 
49087→443 [SYN] Seq=0 Win=29200 Len=0 MSS=1460 SACK_PERM=1 TSval=2874591737 
TSecr=0 WS=64
  4   7.013370      0.0.0.0 -> 88.198.205.8 TCP 74 [TCP Retransmission] 
49087→443 [SYN] Seq=0 Win=29200 Len=0 MSS=1460 SACK_PERM=1 TSval=2874592740 
TSecr=0 WS=64
  5  11.020794      0.0.0.0 -> 88.198.205.8 TCP 74 49088→443 [SYN] Seq=0 
Win=29200 Len=0 MSS=1460 SACK_PERM=1 TSval=2874593741 TSecr=0 WS=64
  6  12.017353      0.0.0.0 -> 88.198.205.8 TCP 74 [TCP Retransmission] 
49088→443 [SYN] Seq=0 Win=29200 Len=0 MSS=1460 SACK_PERM=1 TSval=2874593991 
TSecr=0 WS=64
  7  14.021371      0.0.0.0 -> 88.198.205.8 TCP 74 [TCP Retransmission] 
49088→443 [SYN] Seq=0 Win=29200 Len=0 MSS=1460 SACK_PERM=1 TSval=2874594492 
TSecr=0 WS=64
  8  18.029369      0.0.0.0 -> 88.198.205.8 TCP 74 [TCP Retransmission] 
49088→443 [SYN] Seq=0 Win=29200 Len=0 MSS=1460 SACK_PERM=1 TSval=2874595494 
TSecr=0 WS=64

According to https://duo.com/docs/duounix-notes , IPv6 support was only
added in duo_unix-1.9.12 - September 2014:

* Include https_timeout configuration parameter
* IPv6 support on systems that have getaddrinfo

Could the package be updated so that IPv6 support works?

-- System Information:
Debian Release: 8.5
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: i386 (x86_64)
Foreign Architectures: amd64

Kernel: Linux 3.16.0-4-amd64 (SMP w/8 CPU cores)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages libpam-duo depends on:
ii  libc6              2.19-18+deb8u4
ii  libduo3            1.9.11-1
ii  libpam-runtime     1.1.8-3.1+deb8u1
ii  libpam0g           1.1.8-3.1+deb8u1+b1
ii  libssl1.0.0        1.0.1t-1+deb8u2
ii  multiarch-support  2.19-18+deb8u4

libpam-duo recommends no packages.

libpam-duo suggests no packages.

-- Configuration Files:
/etc/security/pam_duo.conf changed [not included]

-- no debconf information

Reply via email to