On 20.02.2013 22:33, Noel Butler wrote: > On Wed, 2013-02-20 at 09:07 +0100, Rainer Jung wrote: >> 2) Keep original validation code but ad some debug output to STDERR: >> >> http://people.apache.org/~rjung/patches/apr-util-password_validate-debug.patch >> >> <http://people.apache.org/%7Erjung/patches/apr-util-password_validate-debug.patch> >> > Fails > > [Thu Feb 21 07:18:27.549401 2013] [auth_basic:trace1] [pid 31295:tid > 3012647792] mod_auth_basic.c(246): [client fd1d:c01d:1ce::145:58603] > Checking password for user '' using provider 'dbd', result: 3 > > [Thu Feb 21 07:18:27.549593 2013] [auth_basic:error] [pid 31295:tid > 3012647792] [client fd1d:c01d:1ce::145:58603] AH01618: user not found: / > > [Thu Feb 21 07:18:29.308367 2013] [authn_dbd:trace2] [pid 31295:tid > 3004259184] mod_authn_dbd.c(178): [client fd1d:c01d:1ce::145:58603] Got > hashed password '$6$xxxxxxxxx' for user 'noel' > > [Thu Feb 21 07:18:29.308437 2013] [authn_dbd:debug] [pid 31295:tid > 3004259184] mod_authn_dbd.c(199): (70024)passwords do not match: [client > fd1d:c01d:1ce::145:58603] Call to apr_password_validate for user 'noel' > and hashed password '$6$xxxx' validate returned an error > > [Thu Feb 21 07:18:29.308471 2013] [auth_basic:trace1] [pid 31295:tid > 3004259184] mod_auth_basic.c(246): [client fd1d:c01d:1ce::145:58603] > Checking password for user 'noel' using provider 'dbd', result: 0 > > [Thu Feb 21 07:18:29.308505 2013] [auth_basic:error] [pid 31295:tid > 3004259184] [client fd1d:c01d:1ce::145:58603] AH01617: user noel: > authentication failure for "/": Password Mismatch
That's strange, the additional stderr output "crypt_r returned NULL" or "crypt_r returned '%s'" is not shown here. As an alternative one could use strace to check the call to crypt_r and the return value. Rainer
