[Pkg-shadow-devel] Bug#326754: marked as done (chpasswd in woody use only crypt hash)

Mon Sep 5 17:33:14 UTC 2005

Your message dated Mon, 5 Sep 2005 17:50:38 +0200
with message-id <20050905155038.GA2862 at mykerinos.kheops.frmug.org>
and subject line [Pkg-shadow-devel] Bug#326754: chpasswd in woody use only crypt hash
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

--------------------------------------
Received: (at submit) by bugs.debian.org; 5 Sep 2005 13:55:58 +0000
>From igor at pnz.ru Mon Sep 05 06:55:58 2005
Return-path: <igor at pnz.ru>
Received: from dialup-221-103.ptcomm.ru (TIV.CrazyHackStation) [62.33.221.103] 
	by spohr.debian.org with esmtp (Exim 3.36 1 (Debian))
	id 1ECHS1-0005NJ-00; Mon, 05 Sep 2005 06:55:58 -0700
Received: from igor by TIV.CrazyHackStation with local (Exim 3.36 #1 (Debian))
	id 1ECHRv-0001Yp-00
	for <submit at bugs.debian.org>; Mon, 05 Sep 2005 17:55:51 +0400
Date: Mon, 5 Sep 2005 17:55:51 +0400
From: Igor Tihonov <igor at pnz.ru>
To: submit at bugs.debian.org
Subject: chpasswd in woody use only crypt hash
Message-ID: <20050905135551.GA4772 at TIV.CrazyHackStation>
Mime-Version: 1.0
Content-Type: text/plain; charset=koi8-r
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
User-Agent: Mutt/1.5.6+20040907i
Delivered-To: submit at bugs.debian.org
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
	(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Level: 
X-Spam-Status: No, hits=-8.0 required=4.0 tests=BAYES_00,HAS_PACKAGE 
	autolearn=no version=2.60-bugs.debian.org_2005_01_02

Package: passwd
Version: 20000902-12woody1 

The "chpasswd" program not use PAM for change passwÏrds. As a result we
has weak "crypt" hash in /etc/shadow.

The --md5 switch, has appeared  only in SARGE.

I think it a problem of assembly passwd Òackage:
------------------------------
# ldd /usr/sbin/chpasswd 
        libcrypt.so.1 => /lib/libcrypt.so.1 (0x40016000)
        libc.so.6 => /lib/libc.so.6 (0x40043000)
        /lib/ld-linux.so.2 => /lib/ld-linux.so.2 (0x40000000)
------------------------------

-- 

Igor   { registered Linux user number #121385 }

---------------------------------------
Received: (at 326754-done) by bugs.debian.org; 5 Sep 2005 17:21:29 +0000
>From bubulle at kheops.frmug.org Mon Sep 05 10:21:29 2005
Return-path: <bubulle at kheops.frmug.org>
Received: from perrier.eu.org (kheops.perrier.eu.org) [81.56.227.253] 
	by spohr.debian.org with esmtp (Exim 3.36 1 (Debian))
	id 1ECKeu-0005Av-00; Mon, 05 Sep 2005 10:21:29 -0700
Received: from localhost (localhost [127.0.0.1])
	by kheops.perrier.eu.org (Postfix) with ESMTP id 5F34A4F978
	for <326754-done at bugs.debian.org>; Mon,  5 Sep 2005 19:20:51 +0200 (CEST)
Received: from kheops.perrier.eu.org ([127.0.0.1])
	by localhost (kheops [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id 31856-02 for <326754-done at bugs.debian.org>;
	Mon, 5 Sep 2005 19:20:50 +0200 (CEST)
Received: from mykerinos.kheops.frmug.org (mykerinos.kheops.frmug.org [192.168.1.3])
	by kheops.perrier.eu.org (Postfix) with ESMTP id 38F8C4F977
	for <326754-done at bugs.debian.org>; Mon,  5 Sep 2005 19:20:46 +0200 (CEST)
Received: by mykerinos.kheops.frmug.org (Postfix, from userid 7426)
	id 086F323235; Mon,  5 Sep 2005 17:50:38 +0200 (CEST)
Date: Mon, 5 Sep 2005 17:50:38 +0200
From: Christian Perrier <bubulle at debian.org>
To: 326754-done at bugs.debian.org
Subject: Re: [Pkg-shadow-devel] Bug#326754: chpasswd in woody use only crypt hash
Message-ID: <20050905155038.GA2862 at mykerinos.kheops.frmug.org>
References: <20050905135551.GA4772 at TIV.CrazyHackStation>
Mime-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
In-Reply-To: <20050905135551.GA4772 at TIV.CrazyHackStation>
User-Agent: Mutt/1.5.10i
X-Virus-Scanned: by amavisd-new-20030616-p10 (Debian) at kheops.frmug.org
Content-Transfer-Encoding: quoted-printable
Delivered-To: 326754-done at bugs.debian.org
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
	(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Level: 
X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_00,HAS_BUG_NUMBER 
	autolearn=no version=2.60-bugs.debian.org_2005_01_02

Quoting Igor Tihonov (igor at pnz.ru):
> Package: passwd
> Version: 20000902-12woody1=20
>=20
>=20
> The "chpasswd" program not use PAM for change passw=D0=BErds. As a resu=
lt we
> has weak "crypt" hash in /etc/shadow.
>=20
> The --md5 switch, has appeared  only in SARGE.

So, this bug is fixed in sarge, Debian stable version.

Hence closing it.