** Changed in: pam-mysql (Ubuntu Yakkety)
Status: Fix Committed => Fix Released
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1574900
Title:
libpam-mysql undefined symbol:
Can someone please release this fix?!? As far as I can tell, the code
was fixed but never released?
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1574900
Title:
libpam-mysql undefined symbol:
Launchpad has imported 10 comments from the remote bug at
https://bugzilla.redhat.com/show_bug.cgi?id=709534.
If you reply to an imported comment from within Launchpad, your comment
will be sent to the remote bug automatically. Read more about
Launchpad's inter-bugtracker facilities at
I have a branch with a patch for xenial, but I'm afraid the pam-mysql
source package is very much broken there. The build process de-applies
the patches, then builds the binaries, then applies the patches, and
finishes. Not even the two existing patches are applied in that package,
much less my
** Merge proposal linked:
https://code.launchpad.net/~ahasenack/ubuntu/+source/pam-mysql/+git/pam-mysql/+merge/331007
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1574900
Title:
libpam-mysql
Hello,
As of the following bug is there a working fix for xenial?
Because i installed the unofficial package at first comment but turns on error
"Error in service module" if i try either
https://launchpad.net/ubuntu/+source/pam-mysql/0.7~RC1-4ubuntu2.1 still have
error "PAM unable to
Since mysql 5.6, there is no exported function that mimics the server-
side PASSWORD() hash. my_make_scrambled_password() doesn't do it, and
make_scrambled_password() isn't exported anymore.
The solution here is to reimplement that hash algorithm inside
pam_mysql. One of the upstream forks did
Marking this as verification-failed as it seems this is definitivly not
the right solution.
** Tags removed: verification-done-yenial verification-needed-yakkety
** Tags added: verification-failed-xenial verification-failed-yakkety
--
You received this bug notification because you are a member
I'm going to post this over in #1574911 too
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1574900
Title:
libpam-mysql undefined symbol: make_scrambled_password
To manage notifications about this
TL;DR
- pam_mysql.c buf in pam_mysql_check_passwd() is overflowing
- my_make_scrambled_password() is NOT returning content that can be compared to
what is stored in the mysql DB when using PASSWORD().
- my_make_scrambled_password_sha1() seems to be the right one to use, as it
returns a string of
** Description changed:
[Impact]
* libpam-mysql is unable to be used because of an upstream symbol
change in libmysqlclient.
* Upstream libpam-mysql has fixed this by updating the source to use
the now-exported API.
[Test Case]
- Steps to reproduce (with vsftpd):
+
@Brian and other SRU team members, let's see if we can debug the vsftpd
stack smashing issue before releasing pam-mysql (it will probably be a
follow-on patch for pam-mysql), if that's ok with the SRU team?
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is
The VSFTPD bug regarding libpam-mysql stack smashing is here:
https://bugs.launchpad.net/ubuntu/+source/vsftpd/+bug/1574911
Someone reproduced it today and left much better instructions on how to
reproduce the issue than I did.
Should I open a new bug with those findings tagged under
@jlellis: you get "libpam-mysql undefined symbol:
make_scrambled_password" on Trusty?
This bug is not about fixing vsftpd itself. Probably a new bug should be
opened, or the vsftpd bug should be used for trusty as well.
--
You received this bug notification because you are a member of Ubuntu
-
From: boun...@canonical.com [mailto:boun...@canonical.com] On Behalf Of Nish
Aravamudan
Sent: Monday, March 20, 2017 11:56 AM
To: Joi L. Ellis <jlel...@pavlovmedia.com>
Subject: [Bug 1574900] Re: libpam-mysql undefined symbol:
make_scrambled_password
@jlellis: There is no MySQ
@jlellis: There is no MySQL 5.7 in Trusty. Are you using a PPA? Or are
you saying that MySQL 5.5 also has this problem?
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1574900
Title:
libpam-mysql
I've been following this thread for a while now, as this issue also
exists in Trusty. I am using someone's custom-patched vsftpd deb. Is
there any plan to backport this release to trusty?
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to
While re-triaging the update in other bug I also came to verify this fix
in Xenial at least.
** Tags removed: verification-needed
** Tags added: verification-done-yenial verification-needed-yakkety
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is
Reopened:
https://bugs.launchpad.net/ubuntu/+source/vsftpd/+bug/1574911
But yes, the fix for libpam-mysql looks good... I guess. My only usage
was for VSFTPD though.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
Using the official MySQL didn't work either with VSFTPD. The undefined
symbols problem seems to be solved though.
I will file a bug against VSFTPD then since it appears they are not
related... though this used to work just fine in older versions of
Ubuntu.
--
You received this bug notification
Hello OwN,
vsftpd having a stack smashing issue would appear to be its own bug.
This bug is purely about solving the mysql auth issues with 'undefined
symbols'.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
Granted, it turns out I am using MariaDB (10.0.29-MariaDB-
0ubuntu0.16.04.1 Ubuntu 16.04). Is this package supposed to work with
MySQL and its drop-in replacement MariaDB?
Trying official MySQL...
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is
I'm still running into the same issue.
USER test
331 Please specify the password.
PASS
*** stack smashing detected ***: /usr/sbin/vsftpd terminated
500 OOPS: priv_sock_get_result
Disconnecting from site localhost
Contents of /etc/pam.d/vsftpd:
auth required pam_mysql.so user={DBUSERHERE}
Hello OwN, or anyone else affected,
Accepted pam-mysql into xenial-proposed. The package will build now and
be available at https://launchpad.net/ubuntu/+source/pam-
mysql/0.7~RC1-4ubuntu2.1 in a few hours, and then in the -proposed
repository.
Please help us by testing this new package. See
** Summary changed:
- libpam-mysql undefined symbol: make_scrambled_password - Needs Patches
Applied by RedHat / Fedora Community to Fix Ubuntu 16.04
+ libpam-mysql undefined symbol: make_scrambled_password
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is
** Description changed:
[Impact]
- * libpam-mysql is unable to be used because of an upstream symbol
+ * libpam-mysql is unable to be used because of an upstream symbol
change in libmysqlclient.
- * Upstream libpam-mysql has fixed this by updating the source to use
+ * Upstream
** Description changed:
+ [Impact]
+
+ * libpam-mysql is unable to be used because of an upstream symbol
+ change in libmysqlclient.
+
+ * Upstream libpam-mysql has fixed this by updating the source to use
+ the now-exported API.
+
+ [Test Case]
+
+ [Regression Potential]
+
+ * There is
For a) in my prior comment, I have provided test builds at
https://launchpad.net/~nacc/+archive/ubuntu/lp1574900. Please try them
once the PPA is done building and report back.
** Changed in: pam-mysql (Ubuntu Xenial)
Assignee: (unassigned) => Nish Aravamudan (nacc)
** Changed in: pam-mysql
So there appear to be two moving parts here.
a) If building against a version of libmysqlclient without
make_scrambled_password, then https://github.com/NigelCunningham/pam-
MySQL/commit/2f6837b5fb8ef4f5d8a561f3bf82b36cc79e77f4 is needed. This
commit is present in 17.04 but not earlier releases.
** Also affects: pam-mysql (Ubuntu Xenial)
Importance: Undecided
Status: New
** Also affects: pam-mysql (Ubuntu Yakkety)
Importance: Undecided
Status: New
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
Sorry, but using it with VSFTPD doesn't work. It used to, but even with
the patch, it doesn't work, so for me the package is worthless.
I've moved on to using libpam-python anyways. However, it would be nice
if this package actually worked with VSFTPD as it used to.
--
You received this bug
Hi Markus,
libpam-mysql is alive again as a new maintainer take over the project.
As for this bug, somehow another user named stewjohn committed a patch
exactly the same to mine above to the new repo. So you may use the
latest version in Ubuntu 17.04 that had the bug fixed from
Hi,
this item affects me and te .deb files provided above were actually helpful.
Can you provide a src deb package?
It the adressed somewhere and will be patched (officially) for 16.04 ?
Thanks a lot!
Markus
--
You received this bug notification because you are a member of Ubuntu
Bugs, which
After reading MySQL's code, I was able to make it work with this patch
(almost the same as the Fedora patch). The patch switches from the
missing make_scrambled_password() to my_make_scrambled_password().
Although my_make_scrambled_password() was not visible to client programs
in MySQL 5.7,
I found the possible reason in this MySQL bug report:
https://bugs.mysql.com/bug.php?id=80974
> Noted in 5.7.13 changelog
> The my_make_scrambled_password() function in the C client library was
> restricted earlier in MySQL 5.7 (not exported to client programs).
> The function has once again been
Status changed to 'Confirmed' because the bug affects multiple users.
** Changed in: pam-mysql (Ubuntu)
Status: New => Confirmed
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1574900
Title:
** Bug watch added: Red Hat Bugzilla #709534
https://bugzilla.redhat.com/show_bug.cgi?id=709534
** Also affects: pam-mysql (Fedora) via
https://bugzilla.redhat.com/show_bug.cgi?id=709534
Importance: Unknown
Status: Unknown
--
You received this bug notification because you are a
Disregard the proposed solution. It doesn't work. For some reason the
patch from Fedora's version is causing stack overflows. In any event,
this package needs to be fixed somehow. Legacy apps won't work anymore
without it.
We need some kind of solution for:
PAM unable to
38 matches
Mail list logo
