[Pkg-shadow-devel] Bug#182605: Is #182605 really belonging to passwd?

[Steve Langasek]

On Sat, Oct 15, 2005 at 06:34:03PM +0200, Christian Perrier wrote:
> While looking at bug #182606 and then to passwd sources, I finally
> found that the prompting for a new password is not done by passwd
> itself but by the pam_unix PAM module....

> As a consequence, my first reaction is saying that this bug does not
> pertain to passws. Am I right?

No, PAM modules do not do any direct prompting.  They depend on the
conversation function provided by the application.  In this case, passwd
appears to use the misc_conv conversation function provided by libpam_misc,
but if this conversation doesn't meet the needs of passwd, then I would say
that it's the responsibility of the passwd program to provide its own...

Anyway, this seems to be fixed upstream in Linux-PAM 0.80, so as soon as I
get the next upstream version packaged, this bug should be taken care of.
Feel free to reassign to libpam0g.

-- 
Steve Langasek                   Give me a lever long enough and a Free OS
Debian Developer                   to set it on, and I can move the world.
vorlon at debian.org                                   http://www.debian.org/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : http://lists.alioth.debian.org/pipermail/pkg-shadow-devel/attachments/20051016/214e513b/attachment.pgp