Hi Rainer,

On Wed, 2013-02-20 at 09:07 +0100, Rainer Jung wrote:


> I prepared another round of patches t check, what's wrong in
> apr_password_validate. All patches can be applied in srclib/apr-util.
> They are *not* cumulative:
> 
> 1) Undo one change in the password validation function and check whether
> it works then:
> 
> http://people.apache.org/~rjung/patches/apr-util-password_validate-glibc.patch
> 


Still fails


> 2) Keep original validation code but ad some debug output to STDERR:
> 
> http://people.apache.org/~rjung/patches/apr-util-password_validate-debug.patch
> 

Fails

[Thu Feb 21 07:18:27.549401 2013] [auth_basic:trace1] [pid 31295:tid
3012647792] mod_auth_basic.c(246): [client fd1d:c01d:1ce::145:58603]
Checking password for user '' using provider 'dbd', result: 3

[Thu Feb 21 07:18:27.549593 2013] [auth_basic:error] [pid 31295:tid
3012647792] [client fd1d:c01d:1ce::145:58603] AH01618: user  not
found: /

[Thu Feb 21 07:18:29.308367 2013] [authn_dbd:trace2] [pid 31295:tid
3004259184] mod_authn_dbd.c(178): [client fd1d:c01d:1ce::145:58603] Got
hashed password '$6$xxxxxxxxx' for user 'noel'

[Thu Feb 21 07:18:29.308437 2013] [authn_dbd:debug] [pid 31295:tid
3004259184] mod_authn_dbd.c(199): (70024)passwords do not match: [client
fd1d:c01d:1ce::145:58603] Call to apr_password_validate for user 'noel'
and hashed password '$6$xxxx' validate returned an error

[Thu Feb 21 07:18:29.308471 2013] [auth_basic:trace1] [pid 31295:tid
3004259184] mod_auth_basic.c(246): [client fd1d:c01d:1ce::145:58603]
Checking password for user 'noel' using provider 'dbd', result: 0

[Thu Feb 21 07:18:29.308505 2013] [auth_basic:error] [pid 31295:tid
3004259184] [client fd1d:c01d:1ce::145:58603] AH01617: user noel:
authentication failure for "/": Password Mismatch




> 3) Combination of 1) and 2):
> 
> http://people.apache.org/~rjung/patches/apr-util-password_validate-glibc-debug.patch
> 


Fails with:

[Thu Feb 21 07:27:26.761557 2013] [authn_dbd:trace2] [pid 14586:tid
3038497648] mod_authn_dbd.c(178): [client fd1d:c01d:1ce::145:58640] Got
hashed password '$6xxxxxxxxxxx' for user 'noel'
[Thu Feb 21 07:27:26.761737 2013] [authn_dbd:debug] [pid 14586:tid
3038497648] mod_authn_dbd.c(199): (70024)passwords do not match: [client
fd1d:c01d:1ce::145:58640] Call to apr_password_validate for user 'noel'
and hashed password '$6$xxxx' validate returned an error
[Thu Feb 21 07:27:26.761804 2013] [auth_basic:trace1] [pid 14586:tid
3038497648] mod_auth_basic.c(246): [client fd1d:c01d:1ce::145:58640]
Checking password for user 'noel' using provider 'dbd', result: 0
[Thu Feb 21 07:27:26.761848 2013] [auth_basic:error] [pid 14586:tid
3038497648] [client fd1d:c01d:1ce::145:58640] AH01617: user noel:
authentication failure for "/": Password Mismatch



Cheers
N

Attachment: signature.asc
Description: This is a digitally signed message part

Reply via email to