Hi Sam,

On Thu, Jul 31, 2003 at 03:43:50PM -0400, Sam Hartman wrote:
[...]
> Which is exactly the problem.  pam_unix should only work with
> /etc/shadow or NIS for the passwd entry point.  If getpwnam is used,
> it might get far enough to try and change the password of an ldap
> account or something else that simply won't work.
> 
> 
> Nis needs to be special cased in the password changing code.

This appears to be fixed upstream since Linux-PAM 0.78. The following
patch adds checks to make sure only "nis" and "file" methods are
attempted:

  
http://cvs.sourceforge.net/viewcvs.py/pam/Linux-PAM/modules/pam_unix/pam_unix_passwd.c?r1=1.16&r2=1.17
(all in one line)

So I suggest this bug gets tagged 'fixed-upstream' (although I haven't
tested the upstream code myself).

Btw. this bug also prevents me from using 'passwd' instead of
'yppasswd' (which currently forces everything to DES for shadow setups).

Nevertheless, thanks for your packaging work :-)

Fabian


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to