Public bug reported:

The environment for building 10.2p1-2ubuntu3.4 used build-essential
12.12ubuntu2 which is missing the dependency on libcrypt-dev that was
added in build-essential 12.12ubuntu2.26.04.1. (see
https://bugs.launchpad.net/ubuntu/+source/build-essential/+bug/2154780)

As a result, the openssh configure script has `checking for crypt.h...
no` and the resultant sshd-session binary is not linked against
libcrypt.

As a result, password authentication fails for any sshd configured with "UsePAM 
no".
I believe this is the cause of Vox Pupuli's beaker based acceptance tests 
against Ubuntu 26.04 failing recently.
See 
https://github.com/voxpupuli/puppet-systemd/actions/runs/29572984371/job/87861042429
 and https://github.com/voxpupuli/beaker-docker/issues/191

Default installs (UsePAM yes) are NOT affected, because PAM's
pam_unix.so links libcrypt independently.

openssh should probably Build-Depend on libcrypt-dev directly instead of
relying on build-essential, (or libc6-dev to pull in libcrypt-dev like
it did in the past).

Links

https://launchpadlibrarian.net/868095535/buildlog_ubuntu-resolute-amd64.openssh_1%3A10.2p1-2ubuntu3.3_BUILDING.txt.gz
"build-essential (= 12.12ubuntu2.26.04.1)" and "checking for crypt.h... yes"

https://launchpadlibrarian.net/868251451/buildlog_ubuntu-resolute-amd64.openssh_1%3A10.2p1-2ubuntu3.4_BUILDING.txt.gz
"build-essential (= 12.12ubuntu2)" and "checking for crypt.h... no"

** Affects: openssh (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2161162

Title:
  1:10.2p1-2ubuntu3.4 built without crypt()

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openssh/+bug/2161162/+subscriptions


-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to