Re: [webmin-l] Log more authentication debug information?

[Jamie C. <jca...@we...>]

Interesting - I didn't know that MD5 salts could ever be less than
8 characters long, and so neither did the Webmin code :-( I will
fix the regular expression that parses them out of the hash in
the next release, which will fix this problem.

 - Jamie

On 13/Jun/2008 09:56 Andy Theuninck wrote ..
> There was a difference. The old version that didn't work w/ webmin
> only had a 2 character salt.
> 
> I'm not sure how webmin handles authentication checking (lightweight
> perl coder. I cannot for the life of me figure out how
> session_login.cgi handles the POST of username & password to itself),
> but openwebmail has no problems with MD5 hashes having variable length
> salts (still $ delimited). It just uses perl's built in crypt() and
> passes the hash in directly from /etc/shadow without any checking to
> determine what kind of hash it is.
> 
> Andy
> 
> On Fri, Jun 13, 2008 at 11:20 AM, Jamie Cameron <jca...@we...> wrote:
> > That is surprising - was there perhaps some difference in the password
> > hashing format between users (see in the 2nd field in /etc/shadow) ?
> >
> > One way to get more debug information is to install the Authen::PAM
> > perl module, create an /etc/pam.d/webmin file, then restart Webmin. This
> > will allow it to use PAM to check passwords, which logs more information
> > to /var/log/secure or /var/log/authlog.
> >
> >  - Jamie
> >
> > On 13/Jun/2008 08:19 Andy Theuninck wrote ..
> >> Resetting the password in unix did indeed fix the problem. I'm still
> >> curious what the issue was, but I shouldn't complain about a working
> >> installation.
> >>
> >> Thanks.
> >>
> >> On Fri, Jun 13, 2008 at 10:16 AM, Maxwell Smart <cj...@yo...> wrote:
> >> > I just had the same problem and reset the password in unix and it
> >> > worked.  I also recall if you have two instances of Webmin running it
> >> > will cause the same problem.
> >> >
> >> > CJ
> >
> > -------------------------------------------------------------------------
> > Check out the new SourceForge.net Marketplace.
> > It's the best place to buy or sell services for
> > just about anything Open Source.
> > http://sourceforge.net/services/buy/index.php
> > -
> > Forwarded by the Webmin mailing list at web...@li...
> > To remove yourself from this list, go to
> > http://lists.sourceforge.net/lists/listinfo/webadmin-list
> >
> 
> -------------------------------------------------------------------------
> Check out the new SourceForge.net Marketplace.
> It's the best place to buy or sell services for
> just about anything Open Source.
> http://sourceforge.net/services/buy/index.php
> -
> Forwarded by the Webmin mailing list at web...@li...
> To remove yourself from this list, go to
> http://lists.sourceforge.net/lists/listinfo/webadmin-list