RE: Incorrect password

Thanks for the reply,

OK, it works when I do it on the command line as you suggested, so do I take
it there is a problem with suid?

Permissions for /etc/shadow are read only (owner): -r--------

-----Original Message-----
From: Jonathan Miller [mailto:[email protected]]
Sent: 05 February 2003 19:31
To: Leon Mayne
Subject: Re: [Neomail-users] Incorrect password


----- Original Message -----
From: "Leon Mayne" <[email protected]>
Sent: Wednesday, February 05, 2003 1:54 AM


> I tried the PAM authenticate version of checklogin.pl with no joy, and I
> tried running neomail as suid root still with no joy. Same error.
>
> It worked fine on my old linux box!

What happens if you run it by hand?  As root, change into your /var/neomail
(or wherever checklogin.pl wound up) and try:

# if ( ./checklogin.pl ); then echo It works; else echo Does not work; fi

Then on STDIN, type:
/etc/shadow[enter]
(type username)[enter]
(type password)[enter]
It works

If you saw "It works" then try typing the wrong password on purpose and make
sure it returns false on bad password.

If the first try got a "Does not work", there's something else to look at...
Evidently the Perl crypt() isn't compatible with your system's password
method (using MD5?) and we'll need to look at it from that angle.

If it works by hand as root, but not from the web page, we'll explore that
path...

In any case, show us a ls -l /etc/shadow, as I'm not familiar with how
Redhat sets it up.

Let us know how it goes!


-Jonathan



-------------------------------------------------------
This SF.NET email is sponsored by:
SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See!
http://www.vasoftware.com