Review Bug-Debian: #965077

[Hilmar Preuße]

Am 07.12.2022 um 16:32 teilte Andreas Trottmann mit:
> Am 06.12.22 um 20:58 schrieb Hilmar Preuße:

Hi Andreas,

>> in that bug you provided a patch to re-introduce the "SQLAUthTypes
>> Backend" with MySQL database. The feature was discussed in [1] and [2].
>> It was stated that the feature will be removed in MySQL 8.0. Now that
>> MySQL 8.0 in Debian unstable for a while I would expect that the feature
>> (brought in by your patch) is not usable any more.
>>
>> May I disable the patch again? Thanks!
>
> If I understand correctly, my patch should work, because it essentially
> re-implements the deprecated/no-longer-used "password()" function and
> makes proftpd's authentication plugin work independently of anything
> that's implemented or not implemented in Mysql or its libraries.
>
> If you find that there are problems compiling it, you may certainly
> disable the patch.
>
Currently there is no issue with the patch, I'm happy to keep it.
However I'm evaluating if it can be sent to upstream. Currently my
impression is, they will refuse it, b/c the backend is deprecated.

I guess you considered already to load the mod_sql_passwd module and use
the "SQLAuthTypes SHA1" [1]?

Hilmar

[1] /usr/share/doc/proftpd-doc/contrib/mod_sql_passwd.html
--
sigfault