Strange problem with passwords in RedHat 6.0

Strange problem with passwords in RedHat 6.0

Post by Joe » Fri, 23 Jul 1999 04:00:00



Hi,

I'm using RedHat 6.0 Kernel 2.2.5-15 on a SPARCserver 5. The installation
was downloaded from gd.tuwien.acat in vienna. After compiling the kernel for
IP masquerading, I've tried to install a  mailserver. Sendmail worked fine
for the first, but was not very comfortable, when I was out of office. So I
decided to install the qpopper POP3 mailserver, because it seems to be one
of the best (the best?). Installation was very simple, and my first tests
(telent to server over pop3 port) were successful. But when a user tries to
connect, he always get he message wrong password. So I tried different
configurations (spcial-auth parametor for configure, -DAUTH in makefile) and
a lot of the stuff I found in FAQ's and the suggestions people (THANKS!!)
sent me via e-mail.
Getting frustrated by beeing unable to get it work in 10 days, I've tried to
use Cyrus IMAP server instead. Download, configuration, compile and install
were also very simple, the first test (telent.... see above) and the test
utility imtest shows me, that I'm on the right way. But when I tried to use
cyradm the program asked me for a user (I tried root) and a password (as you
guessed, tried the root-password). Got the message Wrong Password !! (...
pwcheck is running, tried several configuration options, bla,bla bla....)

It seems to me (correct me, if I'm wrong) that the pwcheck program compares
the password which has been entered in the mail-client with the one who is
in the /etc/shadow file ( I AM using shadow password file !!).

After adding some debug code (very simple printf commands) in
pwcheck_getspnam.c (also tried the pwcheck_getpwnam.c version, but the
passwords which will be compared are that different, so I think this is the
wrong way...) I got the following output:

getspnam-Debug:
Password from /etc/shadow     : $1$T1gp7QPv$QeJ278puZM3B.zDIUA.Nk1
Password generated by crypt() : $1$T1gp7QPv$3gmKod9BErPhayuKWvmLV1

The crypted password from /etc/shadow is O.K. But the password which will be
generated from the plaintext password is different from the one in the
shadow file.

BUT WHY. Don't they use the same mechanism to decrypt passwords ?????

I would be very thankful for EVERY help I get. I'm stuck now, and do not
know what else to try....

a frustrated
Joe

 
 
 

Strange problem with passwords in RedHat 6.0

Post by Frank v Waver » Fri, 23 Jul 1999 04:00:00




Quote:> Hi,

> I'm using RedHat 6.0 Kernel 2.2.5-15 on a SPARCserver 5. The installation
> was downloaded from gd.tuwien.acat in vienna. After compiling the kernel for
> IP masquerading, I've tried to install a  mailserver. Sendmail worked fine
> for the first, but was not very comfortable, when I was out of office. So I
> decided to install the qpopper POP3 mailserver, because it seems to be one
> of the best (the best?). Installation was very simple, and my first tests
> (telent to server over pop3 port) were successful. But when a user tries to
> connect, he always get he message wrong password. So I tried different
> configurations (spcial-auth parametor for configure, -DAUTH in makefile) and
> a lot of the stuff I found in FAQ's and the suggestions people (THANKS!!)
> sent me via e-mail.
> Getting frustrated by beeing unable to get it work in 10 days, I've tried to
> use Cyrus IMAP server instead. Download, configuration, compile and install
> were also very simple, the first test (telent.... see above) and the test
> utility imtest shows me, that I'm on the right way. But when I tried to use
> cyradm the program asked me for a user (I tried root) and a password (as you
> guessed, tried the root-password). Got the message Wrong Password !! (...
> pwcheck is running, tried several configuration options, bla,bla bla....)

> It seems to me (correct me, if I'm wrong) that the pwcheck program compares
> the password which has been entered in the mail-client with the one who is
> in the /etc/shadow file ( I AM using shadow password file !!).

> After adding some debug code (very simple printf commands) in
> pwcheck_getspnam.c (also tried the pwcheck_getpwnam.c version, but the
> passwords which will be compared are that different, so I think this is the
> wrong way...) I got the following output:

> getspnam-Debug:
> Password from /etc/shadow     : $1$T1gp7QPv$QeJ278puZM3B.zDIUA.Nk1
> Password generated by crypt() : $1$T1gp7QPv$3gmKod9BErPhayuKWvmLV1

> The crypted password from /etc/shadow is O.K. But the password which will be
> generated from the plaintext password is different from the one in the
> shadow file.

> BUT WHY. Don't they use the same mechanism to decrypt passwords ?????

> I would be very thankful for EVERY help I get. I'm stuck now, and do not
> know what else to try....

Just ignoring you're little debug-quest, have you tried a non-root user? lotsa
software won't allow plaintext sending of the root pw (or atleast not accept
it).
--

                        Frank v Waveren

                        ICQ# 10074100

 
 
 

Strange problem with passwords in RedHat 6.0

Post by Joe » Sat, 24 Jul 1999 04:00:00


OH LORD......

2 Weeks of messing around - but now I have the solution !!!!!!!

I have installed RH 6.0 for SPARC using shadow password AND md5 password. It
seems, that the encryption of crypt() creates not the same password like
passwd does (perhaps a problem in my pam.d directory in the 'login' and
'other' file - anyone an idea ???).

I disabled the MD5 password encryption in the setup tool, (IMPORTANT: ) set
up the same passwords again with passwd (because otherwise the password
stays the same in /etc/shadow !!!) AND IT WORKED !!!!

Cyrus IMAP is working fine, and now I check qpopper again.....

:-)

Joe



Quote:> Hi,

> I'm using RedHat 6.0 Kernel 2.2.5-15 on a SPARCserver 5. The installation
> was downloaded from gd.tuwien.acat in vienna. After compiling the kernel
for
> IP masquerading, I've tried to install a  mailserver. Sendmail worked fine
> for the first, but was not very comfortable, when I was out of office. So
I
> decided to install the qpopper POP3 mailserver, because it seems to be one
> of the best (the best?). Installation was very simple, and my first tests
> (telent to server over pop3 port) were successful. But when a user tries
to
> connect, he always get he message wrong password. So I tried different
> configurations (spcial-auth parametor for configure, -DAUTH in makefile)
and
> a lot of the stuff I found in FAQ's and the suggestions people (THANKS!!)
> sent me via e-mail.
> Getting frustrated by beeing unable to get it work in 10 days, I've tried
to
> use Cyrus IMAP server instead. Download, configuration, compile and
install
> were also very simple, the first test (telent.... see above) and the test
> utility imtest shows me, that I'm on the right way. But when I tried to
use
> cyradm the program asked me for a user (I tried root) and a password (as
you
> guessed, tried the root-password). Got the message Wrong Password !! (...
> pwcheck is running, tried several configuration options, bla,bla bla....)

> It seems to me (correct me, if I'm wrong) that the pwcheck program
compares
> the password which has been entered in the mail-client with the one who is
> in the /etc/shadow file ( I AM using shadow password file !!).

> After adding some debug code (very simple printf commands) in
> pwcheck_getspnam.c (also tried the pwcheck_getpwnam.c version, but the
> passwords which will be compared are that different, so I think this is
the
> wrong way...) I got the following output:

> getspnam-Debug:
> Password from /etc/shadow     : $1$T1gp7QPv$QeJ278puZM3B.zDIUA.Nk1
> Password generated by crypt() : $1$T1gp7QPv$3gmKod9BErPhayuKWvmLV1

> The crypted password from /etc/shadow is O.K. But the password which will
be
> generated from the plaintext password is different from the one in the
> shadow file.

> BUT WHY. Don't they use the same mechanism to decrypt passwords ?????

> I would be very thankful for EVERY help I get. I'm stuck now, and do not
> know what else to try....

> a frustrated
> Joe