From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (qmail 1310 invoked from network); 25 Sep 2002 15:25:13 -0000 Received: from unknown (HELO monty-python.gnu.org) (199.232.76.173) by sources.redhat.com with SMTP; 25 Sep 2002 15:25:13 -0000 Received: from localhost ([127.0.0.1] helo=monty-python.gnu.org) by monty-python.gnu.org with esmtp (Exim 4.10) id 17uE2H-0000Qm-00; Wed, 25 Sep 2002 11:25:09 -0400 Received: from list by monty-python.gnu.org with tmda-scanned (Exim 4.10) id 17uE1X-0000LI-00 for help-gnats@gnu.org; Wed, 25 Sep 2002 11:24:23 -0400 Received: from mail by monty-python.gnu.org with spam-scanned (Exim 4.10) id 17uE1V-0000L6-00 for help-gnats@gnu.org; Wed, 25 Sep 2002 11:24:22 -0400 Received: from flamingo.mail.pas.earthlink.net ([207.217.120.232]) by monty-python.gnu.org with esmtp (Exim 4.10) id 17uE1V-0000L2-00 for help-gnats@gnu.org; Wed, 25 Sep 2002 11:24:21 -0400 Received: from user-1121c67.dsl.mindspring.com ([66.32.176.199] helo=zeewin) by flamingo.mail.pas.earthlink.net with smtp (Exim 3.33 #1) id 17uE1M-0005Ln-00; Wed, 25 Sep 2002 08:24:12 -0700 Reply-To: From: "Pankaj K Garg" To: "'Lars Henriksen'" , Cc: Subject: RE: Patch: Fix user authentication + MKDB Message-ID: <000801c264ac$1154ae30$8d835f0f@home.org> MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook 8.5, Build 4.71.2173.0 X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2314.1300 In-Reply-To: <20020925090817.GA1135030@cluster2.netman.dk> Importance: Normal Sender: help-gnats-admin@gnu.org Errors-To: help-gnats-admin@gnu.org X-BeenThere: help-gnats@gnu.org X-Mailman-Version: 2.0.11 Precedence: bulk List-Help: List-Post: List-Subscribe: , List-Id: General discussion about GNU GNATS List-Archive: Date: Wed, 25 Sep 2002 08:59:00 -0000 X-SW-Source: 2002-q3/txt/msg00124.txt.bz2 > > 1) MKDB: creates all parent directories in case they did > > not exist. > I'm not sure I agree. Let mkdb do what it's supposed to do: create > the database, and let the gnats administrator do what he is supposed > to do: establish the prerequisites for invoking mkdb. I used this to fix the problem of the 'com' directory not being there for the creation of the default database. Another fix would be to create the /com directory as part of the 'make install'...I can do that if people prefer that. This seemed like a more general fix, as why do things in two steps when you can do it in one? > > 3) PASSWORD CHECKING: The password checking in the current CVS > > directory is broken. It was not working as someone else also > > recenlty noted on this list. The problems were: (a) it was using > > the opposite logic of match(), (b) it did not default to plain > > text passwords, (c) an empty database list was confusing it, and > > (d) there was no fall-through. > > I agree with (a) and (c), but not with (b); (d) should be considered. > > As for (b), the password checking behaves as described in > version 4 of the > gnats manual (Keeping Track), see section C.4. Yngve Svendsen > put a lot > of work into this and I believe it behaves as intended. There is no > "default". You get the kind of password checking you ask for: > > plain text for passwords with a $0$ prefix, > MD5 format for passwords with a $1$ prefix, and > DES format for passwords without a prefix. > > Your example below will be interpreted as having traditional Unix > DES-crypted passwords and will effectively be no-login entries. OK, sorry I did not take a look at the manual:-) I was tripped off by the default line '#*:*:view' in the 'gnatsd.user_access' file and thought that the default behavior was for plain-text passwords. So,this requires fixing in my patch. I'll redo it such that it defaults to DES instead of plain-text. Regards Pankaj _______________________________________________ Help-gnats mailing list Help-gnats@gnu.org http://mail.gnu.org/mailman/listinfo/help-gnats