[Pkg-monitoring-maintainers] Bug#932277: mon: Doesn't handle md5 hashed passwords

[Russell Coker]

Package: mon
Version: 1.3.3-4
Severity: normal

If you use htpasswd to change the password for an account for mon login
(eg "htpasswd /etc/mon/monusers.cf username") when using "authtype = userfile"
in mon.cf then you won't be able to login.  It seems that the perl crypt()
function requires that you run "htpasswd -d" to set the password.

Ideally it will take the MD5 passwords and also have proper documentation on
this explaining the types of password and the configuration options.

Also the default config file should have commented entries for this.

-- System Information:
Debian Release: 10.0
  APT prefers stable
  APT policy: (500, 'stable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 4.19.0-5-amd64 (SMP w/2 CPU cores)
Kernel taint flags: TAINT_WARN
Locale: LANG=en_AU.UTF-8, LC_CTYPE=en_AU.UTF-8 (charmap=UTF-8), LANGUAGE=en_AU:en (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: SELinux: enabled - Mode: Permissive - Policy name: default

Versions of packages mon depends on:
ii  adduser              3.118
ii  libc6                2.28-10
ii  libtime-period-perl  1.25-1
ii  mon-client           1.2.0-2

Versions of packages mon recommends:
ii  bc                               1.07.1-2+b1
pn  fping                            <none>
pn  libauthen-pam-perl               <none>
ii  libcgi-pm-perl                   4.40-1
pn  libcrypt-ssleay-perl             <none>
ii  libfilesys-df-perl               0.92-6+b4
ii  libmail-imapclient-perl          3.42-1
ii  libnet-dns-perl                  1.19-1
pn  libnet-ldap-perl                 <none>
pn  libnet-telnet-perl               <none>
ii  libproc-processtable-perl        0.56-1
pn  libsnmp-perl                     <none>
pn  libstatistics-descriptive-perl   <none>
pn  libtime-parsedate-perl           <none>
ii  libtimedate-perl                 2.3000-2
ii  perl-modules-5.24 [libnet-perl]  5.24.1-3+deb9u2
ii  swaks                            20181104.0-2

Versions of packages mon suggests:
pn  mon-contrib  <none>

-- Configuration Files:
/etc/mon/mon.cf changed [not included]

-- no debconf information

-- debsums errors found:
debsums: changed file /usr/lib/mon/mon-local.d/loadavg.monitor (from mon package)