Your message dated Thu, 17 Nov 2016 07:48:42 +0000
with message-id <[email protected]>
and subject line Bug#826553: fixed in duo-unix 1.9.19-1
has caused the Debian Bug report #826553,
regarding libpam-duo: No IPv6 support in libpam-duo 1.9.11
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
826553: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=826553
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: libpam-duo
Version: 1.9.11-1
Severity: normal
Tags: ipv6
Dear Maintainer,
I'm trying to use libpam-duo on a server that has only IPv6
connectivity. Our authentication server has both IPv4 and IPv6
addresses:
xenh4:~# host auth.iserv.eu
auth.iserv.eu has address 88.198.205.8
auth.iserv.eu has IPv6 address 2a01:4f8:162:1247::108
Unfortunately, libpam-duo seems to ignore the IPv6 and always tries to
connect via IPv4:
xenh4:~# tshark -i eth0 -f "host auth.iserv.eu"
Capturing on 'eth0'
1 0.000000 0.0.0.0 -> 88.198.205.8 TCP 74 49087→443 [SYN] Seq=0
Win=29200 Len=0 MSS=1460 SACK_PERM=1 TSval=2874590986 TSecr=0 WS=64
2 0.997362 0.0.0.0 -> 88.198.205.8 TCP 74 [TCP Retransmission]
49087→443 [SYN] Seq=0 Win=29200 Len=0 MSS=1460 SACK_PERM=1 TSval=2874591236
TSecr=0 WS=64
3 3.001370 0.0.0.0 -> 88.198.205.8 TCP 74 [TCP Retransmission]
49087→443 [SYN] Seq=0 Win=29200 Len=0 MSS=1460 SACK_PERM=1 TSval=2874591737
TSecr=0 WS=64
4 7.013370 0.0.0.0 -> 88.198.205.8 TCP 74 [TCP Retransmission]
49087→443 [SYN] Seq=0 Win=29200 Len=0 MSS=1460 SACK_PERM=1 TSval=2874592740
TSecr=0 WS=64
5 11.020794 0.0.0.0 -> 88.198.205.8 TCP 74 49088→443 [SYN] Seq=0
Win=29200 Len=0 MSS=1460 SACK_PERM=1 TSval=2874593741 TSecr=0 WS=64
6 12.017353 0.0.0.0 -> 88.198.205.8 TCP 74 [TCP Retransmission]
49088→443 [SYN] Seq=0 Win=29200 Len=0 MSS=1460 SACK_PERM=1 TSval=2874593991
TSecr=0 WS=64
7 14.021371 0.0.0.0 -> 88.198.205.8 TCP 74 [TCP Retransmission]
49088→443 [SYN] Seq=0 Win=29200 Len=0 MSS=1460 SACK_PERM=1 TSval=2874594492
TSecr=0 WS=64
8 18.029369 0.0.0.0 -> 88.198.205.8 TCP 74 [TCP Retransmission]
49088→443 [SYN] Seq=0 Win=29200 Len=0 MSS=1460 SACK_PERM=1 TSval=2874595494
TSecr=0 WS=64
According to https://duo.com/docs/duounix-notes , IPv6 support was only
added in duo_unix-1.9.12 - September 2014:
* Include https_timeout configuration parameter
* IPv6 support on systems that have getaddrinfo
Could the package be updated so that IPv6 support works?
-- System Information:
Debian Release: 8.5
APT prefers stable-updates
APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: i386 (x86_64)
Foreign Architectures: amd64
Kernel: Linux 3.16.0-4-amd64 (SMP w/8 CPU cores)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
Versions of packages libpam-duo depends on:
ii libc6 2.19-18+deb8u4
ii libduo3 1.9.11-1
ii libpam-runtime 1.1.8-3.1+deb8u1
ii libpam0g 1.1.8-3.1+deb8u1+b1
ii libssl1.0.0 1.0.1t-1+deb8u2
ii multiarch-support 2.19-18+deb8u4
libpam-duo recommends no packages.
libpam-duo suggests no packages.
-- Configuration Files:
/etc/security/pam_duo.conf changed [not included]
-- no debconf information
--- End Message ---
--- Begin Message ---
Source: duo-unix
Source-Version: 1.9.19-1
We believe that the bug you reported is fixed in the latest version of
duo-unix, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Kees Cook <[email protected]> (supplier of updated duo-unix package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 16 Nov 2016 21:25:57 -0800
Source: duo-unix
Binary: libpam-duo login-duo libduo3 libduo-dev
Architecture: source amd64
Version: 1.9.19-1
Distribution: unstable
Urgency: medium
Maintainer: Kees Cook <[email protected]>
Changed-By: Kees Cook <[email protected]>
Description:
libduo-dev - Duo Security development libraries and header files
libduo3 - Duo Security library
libpam-duo - PAM module for Duo Security two-factor authentication
login-duo - login wrapper for Duo Security two-factor authentication
Closes: 748895 826553 828288
Changes:
duo-unix (1.9.19-1) unstable; urgency=medium
.
* New upstream release (Closes: 826553).
* control: fixed typos (Closes: 748895).
* patches/openssl.patch: add openssl 1.1.0 support (Closes: 828288).
* copyright: fix filename globs to use .? since .[ch] isn't supported.
* control: bump standards version; no changes needed.
* rules:
- enable full hardening
- strip rpath
Checksums-Sha1:
3992b4cfbd5ae75df4c398e5deabb3d00fe34ad3 1956 duo-unix_1.9.19-1.dsc
d095f005ae42703d338f9002b13f12d5a2160fcb 470432 duo-unix_1.9.19.orig.tar.gz
157bb7d648aa4e311bebe9c736d65ca2830e2abc 8436 duo-unix_1.9.19-1.debian.tar.xz
4246c9df64e87efd03ab2787057d13f122241d17 7772 duo-unix_1.9.19-1_amd64.buildinfo
4cb6fc5e960272f46b87dfef01e29a1f40a702d8 8554 libduo-dev_1.9.19-1_amd64.deb
c15b58fd20ea98e142bfffb68cc0d93c12d622b3 65030
libduo3-dbgsym_1.9.19-1_amd64.deb
c189078e1c2bf217b7a05ed5bbba39e00520939f 35398 libduo3_1.9.19-1_amd64.deb
0ea95d7803d89c641045aa0b59b7ebe133214f40 13844
libpam-duo-dbgsym_1.9.19-1_amd64.deb
f321b624497a561e583cdeedbf2dd926df10011a 14814 libpam-duo_1.9.19-1_amd64.deb
41690436797a0e4778fa31822425b07034f96465 12090
login-duo-dbgsym_1.9.19-1_amd64.deb
07f50402477747ba8b20d58f314f9f1228f597f6 15704 login-duo_1.9.19-1_amd64.deb
Checksums-Sha256:
c8b99832a29a6a574c6212c42391ed1ff7b49fec6cf12ab34f8eceeedefb6b33 1956
duo-unix_1.9.19-1.dsc
2d23f9700f091da1c9113b45919203b37fac6392a9e24a666c7b0269a7571b0a 470432
duo-unix_1.9.19.orig.tar.gz
e12a76716d26fa7b8b882b9573058f166561da5947a31479d7f80efe403121f9 8436
duo-unix_1.9.19-1.debian.tar.xz
59e036ce17258b573d01ca2d020a262c68eb6eb433f652726528e367b88a0af3 7772
duo-unix_1.9.19-1_amd64.buildinfo
e8872e3bb7c019ce96af12d778e2cc15f0569e9a60f000a7ed9b8e487c04240b 8554
libduo-dev_1.9.19-1_amd64.deb
60dd4209a334ab0bcadeb3e0acedf55554b0c4f2742bf8a07fdb5d7355f686a4 65030
libduo3-dbgsym_1.9.19-1_amd64.deb
9cecb44181b9ac1845f85389d25b23abba1b508ce3cb235eedf11c412847f031 35398
libduo3_1.9.19-1_amd64.deb
5fcd109f05e803239cf43766e9d7ea8eb0a320fad08e361293855229f689616a 13844
libpam-duo-dbgsym_1.9.19-1_amd64.deb
6b899a57dc4819ab6e7b10be675e478831152f538df3d781234733b6d582558a 14814
libpam-duo_1.9.19-1_amd64.deb
b6440344b7a45a923018cdad5b7359aacdd55b6cc37099348cfd8c66369c7a79 12090
login-duo-dbgsym_1.9.19-1_amd64.deb
a5ac099c7c2dd57dc14dfb33d790854ebeb9e888f6bb10a44edb6fea0bbc802b 15704
login-duo_1.9.19-1_amd64.deb
Files:
240cae3b76fb85648935bb68d66b1019 1956 libs extra duo-unix_1.9.19-1.dsc
2df21908cb1f8b58823291b4673289cd 470432 libs extra duo-unix_1.9.19.orig.tar.gz
5c76b6badf2097f84b82813ba243b5de 8436 libs extra
duo-unix_1.9.19-1.debian.tar.xz
0dd2c3313b8cfb883633b2f25f0211a0 7772 libs extra
duo-unix_1.9.19-1_amd64.buildinfo
0ac06ad3d81494b662fb8dbf22b74522 8554 libdevel extra
libduo-dev_1.9.19-1_amd64.deb
0df3869cfad2a3d7a960e9c1f8828991 65030 debug extra
libduo3-dbgsym_1.9.19-1_amd64.deb
462350850c7f3c298df37ceb1a63a328 35398 libs extra libduo3_1.9.19-1_amd64.deb
240cf97c25408abe39225323730307db 13844 debug extra
libpam-duo-dbgsym_1.9.19-1_amd64.deb
8680f7a021887381cd2d62f4a7311c86 14814 libs extra libpam-duo_1.9.19-1_amd64.deb
e7926059988451a80a41774e36217472 12090 debug extra
login-duo-dbgsym_1.9.19-1_amd64.deb
de726f4150e59f30dbfc96deb538641b 15704 admin extra login-duo_1.9.19-1_amd64.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
Comment: Kees Cook <[email protected]>
iQIbBAEBCgAGBQJYLVqbAAoJEIly9N/cbcAmnLwP+Ky6z+JAYxySz5yvUh221qBd
pmtS6O75BybN0P/nUYSBIuXWDbvBQSnsd9LWGjNMqQrBBv7zuXPqUZWnNwfRYQcb
hsaZafWfvprLBoZInMJbe2nvzEWDnCZU6joiqpYHDEDssj3c9YYPWkbfPi0CLDTo
Yc3d461F9yqVm9NFLEsp+NXgoxdWgf9DYfiI4xgLigZjonOZ9Fb4Gd6So7gnFbPW
M9HAbfkNhevtXT4O2jnATiKeGWtM5NfjzbEcSG0weF1OxRa7iRVHAAvwkndo5KRu
bjsnpBp1Y27CSPsixdK+vk/e54mPliM8GWqGxzwMgWwWtrLuypjnTX3HwHOVzxLj
V0llQf8w/MdJO7QLv8KWQGzF9cUWdg/Yvmab7uvdGzfk+JMcRY6lk3kWf4tkU5n1
jrpjaMdv5xyHYGXJpAdCnkOL+F7Cq2zSfvvJgwvLxJ+Vx6evgIf+NbY0rKWmDsT1
9BdfCuqeFBJ7uJT4q1jl9zwl7V7Lon8OiZ5MauTqmyLe3T1ak2ihPyrK4xQGAybY
VeQE7ThJdvlQWsY/bd4VfY1qq7mmiCiovxfB+CEDGe2fEWVLJvs3ZQdKuUDiyHl7
r4hREQ5mnowl1U21gUeb/T9UQL/2g16a20DMUFSqw38FxryNaAWQhlPZ55n5Ld4m
A7J1VtFCcvfKBkfydBc=
=B2pX
-----END PGP SIGNATURE-----
--- End Message ---
