FS#2522 - cracklib in pam is outdated

Attached to Project: Arch Linux
Opened by Jan de Groot (JGC) - Friday, 08 April 2005, 11:50 GMT
Task Type Bug Report
Category Packages: Current
Status Closed
Assigned To Judd Vinet (judd)
Architecture not specified
Severity Low
Priority Normal
Reported Version 0.7 Wombat
Due in Version Undecided
Due Date Undecided
Percent Complete 0%
Votes 0
Private No

Details

The cracklib that comes with our pam is very outdated. In the PKGBUILD, some cracklib files are extracted to get pam build with cracklib.

The problem with these files is that they are built using gcc 2.7.2 on a glibc 2.1 or 2.2 system, which is incompatible with glibc 2.3.x.

Instructions for building cracklib from source:
http://www.linuxfromscratch.org/hints/downloads/files/pam+shadow+cracklib.txt

Instead of the make install, the files can be placed in the same location as the cracklib files do now.
This task depends upon

Closed by  Judd Vinet (judd)
Monday, 02 May 2005, 02:14 GMT
Reason for closing:  Implemented
Comment by Judd Vinet (judd) - Tuesday, 12 April 2005, 06:49 GMT
It appears the lib is missing.


[jvinet@earth cl]$ wget http://www.users.dircon.co.uk/~crypto/download/cracklib,2.7.tgz
--23:22:30-- http://www.users.dircon.co.uk/%7Ecrypto/download/cracklib,2.7.tgz
=> `cracklib,2.7.tgz'
Resolving www.users.dircon.co.uk... 194.112.32.113
Connecting to www.users.dircon.co.uk[194.112.32.113]:80... connected.
HTTP request sent, awaiting response... 404 Not Found
23:22:30 ERROR 404: Not Found.
Comment by Jan de Groot (JGC) - Tuesday, 12 April 2005, 07:25 GMT
http://www.crypticide.com/users/alecm/

Seems the site moved.
Comment by Jürgen Hötzel (juergen) - Tuesday, 12 April 2005, 16:17 GMT
Supposable nobody is affected by the bug, because pam_cracklib isn't used in the default package configuration files.

Fixing would require 2 new packages. cracklib and a worldlist (make dependency for cracklib).

Jürgen
Comment by Jan de Groot (JGC) - Tuesday, 12 April 2005, 16:45 GMT
I wanted to build revelation against it. Revelation needs cracklib2, which is included as static version with pam. When I build cracklib2 from source, I get file conflicts with pam, and a static version of cracklib, so I wanted to use the static version in pam, which doesn't work because glibc only offers binary compatibility for static libs between minor versions, not major versions.
Comment by Jan de Groot (JGC) - Monday, 18 April 2005, 17:12 GMT
Apeiro:
http://aur.archlinux.org/packages.php?do_Details=1&ID=466

Please remove the non-working crack stuff from pam and import the package from AUR.

Loading...