[Bug 1283041] [NEW] Authentication against MySQL Table with old hashes fails

[Maik Ihde]

Public bug reported:

Authentication  using "Backend" encrypt Mechanism  against a MySQL Table
which users the old short hashes as used in MySQL <4.1 fails. Creating a
new-style hash as used by PASSWORD is working like a charm. However the
application is rather old and thus the shorter hashes (as created with
OLD_PASSWORD() function) have been used.

Excerpt from sql.log:
----snip---
Feb 21 13:58:54 mod_sql/4.3[7553]: >>> cmd_check
Feb 21 13:58:54 mod_sql/4.3[7553]: checking password using SQLAuthType 'Backend'
Feb 21 13:58:54 mod_sql/4.3[7553]: entering     mysql cmd_checkauth
Feb 21 13:58:54 mod_sql/4.3[7553]: password mismatch
Feb 21 13:58:54 mod_sql/4.3[7553]: exiting      mysql cmd_checkauth
Feb 21 13:58:54 mod_sql/4.3[7553]: 'Backend' SQLAuthType handler reports failure
---snip---

(Using crypt or emtpy password also works, so this is not a
configuration issue.)

This ist an Ubuntu 12.04.4 LTS Server using  kernel 3.2.0-58 (amd_64)

** Affects: proftpd-dfsg (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of ProFTPD
Maintainance Team, which is subscribed to proftpd-dfsg in Ubuntu.
https://bugs.launchpad.net/bugs/1283041

Title:
  Authentication against MySQL Table with old hashes fails

Status in “proftpd-dfsg” package in Ubuntu:
  New

Bug description:
  Authentication  using "Backend" encrypt Mechanism  against a MySQL
  Table  which users the old short hashes as used in MySQL <4.1 fails.
  Creating a new-style hash as used by PASSWORD is working like a charm.
  However the application is rather old and thus the shorter hashes (as
  created with OLD_PASSWORD() function) have been used.

  Excerpt from sql.log:
  ----snip---
  Feb 21 13:58:54 mod_sql/4.3[7553]: >>> cmd_check
  Feb 21 13:58:54 mod_sql/4.3[7553]: checking password using SQLAuthType 'Backend'
  Feb 21 13:58:54 mod_sql/4.3[7553]: entering     mysql cmd_checkauth
  Feb 21 13:58:54 mod_sql/4.3[7553]: password mismatch
  Feb 21 13:58:54 mod_sql/4.3[7553]: exiting      mysql cmd_checkauth
  Feb 21 13:58:54 mod_sql/4.3[7553]: 'Backend' SQLAuthType handler reports failure
  ---snip---

  (Using crypt or emtpy password also works, so this is not a
  configuration issue.)

  This ist an Ubuntu 12.04.4 LTS Server using  kernel 3.2.0-58 (amd_64)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/proftpd-dfsg/+bug/1283041/+subscriptions