Re: ldm login and password that starts with '@'

Jan Middelkoop <[email protected]>
Newsgroups gmane.linux.redhat.k12osn
Message-ID <[email protected]>
Sounds like you'd best file a bug upstream with LTSP.

https://bugs.launchpad.net/ltsp

Kindest regards,

Jan Middelkoop
Recreatie en Zorg Groep B.V.

-- 
Website: http://www.recreatie-zorg.nl/
E-mail: [email protected]
Telefoon: +31 10 714 22 97


Op 01-03-12 03:19, Norman Gaywood schreef:
> Just found an interesting bug in ldm. If you type @ as the first
> character of the password, the enter key does not work.
>
> The password of @guest@ or @backend@ will allow the enter key to work
> again but the login screen will just go back to the user prompt.
>
> This of course will stop people having @ as the first character of their
> password.
>
> Here is the code from ldmgreetercomm.c that I think is going wrong:
>
> int listen_greeter(gchar **buffer, gsize *buflen, gsize *end) {
>      while (1) {
>          /* Reads data from I/O channel of the greeter */
>          GError *ge = NULL;
>          if(g_io_channel_read_line(greeterr, buffer, buflen, end,&ge) != G_IO_STATUS_NORMAL) {
>              log_entry("ldm",3,"%s", ge->message);
>              return 1;
>          }
>
>          g_strstrip(*buffer);
>          log_entry("ldm",7,"Got command: %s",*buffer);
>
>          /* handle callbacks */
>          if (**buffer == '@') {
>              if (!g_strncasecmp(*buffer, "@backend@", 9)) {
>                  ldm_raise_auth_except(AUTH_EXC_RELOAD_BACKEND);
>              } else if (!g_strncasecmp(*buffer, "@guest@", 7)) {
>                  ldm_raise_auth_except(AUTH_EXC_GUEST);
>              }
>              continue;
>          }
>          break;
>      }
>      return 0;
> }
>
>
> I think that continue should not be there.
>
>

_______________________________________________
K12OSN mailing list
[email protected]
https://www.redhat.com/mailman/listinfo/k12osn
For more info see <http://www.k12os.org>
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.