Re: [exim] Unable to authenticate at present (set_id=usernam…

Page principale
Supprimer ce message
Répondre à ce message
Auteur: Victor Ustugov
Date:  
À: Thomas Stein
Anciens-sujets: Re: [exim] Unable to authenticate at present (set_id=username): missing or misplaced { or }
Sujet: Re: [exim] Unable to authenticate at present (set_id=username): missing or misplaced { or }
Thomas Stein wrote:

>>>> workaround:
>>>>
>>>> exim -be '${if
>>>> exists{/etc/exim/passwd}{${lookup{eitadmin}lsearch{/etc/exim/passwd}{${if
>>>>
>>>> crypteq{test}{${sg{$value}{\N:.*\N}{}}}{true}{false}}}{${if
>>>
>>> Now the "md5" part is missing. Decoding the password cannot work anymore
>>> right?
>>
>> i have tested MD5 encrypted passwords with salt
>> ($1$dk$HraXz0BPruPQiInDQ.Cvj0 for "test").
>
> After generating the password with: "perl -e 'print crypt("test",
> q($5$salt$)), "\n";'" everything works as expected.
> Thank you Victor.


to my mind this is the same bug:

https://lists.exim.org/lurker/message/20160311.150529.412cdd3b.en.html

https://bugs.exim.org/show_bug.cgi?id=1807

so, you can apply patch
http://git.exim.org/exim.git/patch/93cc2d6e053031a7008f73ca1ea072038bfa3fc8
and use your original authenticator with ${extract.

> cheers
> t.
>
>> feel free to use
>>
>> ${sg{$value}{\N^(\S+?):.*\N}{\{md5\}\$1}}
>>
>> instead of
>>
>> ${sg{$value}{\N:.*\N}{}}
>>
>> but in this case you must use one password scheme for all passwords.
>>
>>> thanks again and best regards
>>> t.
>>>
>>>> pam{eitadmin:${sg{test}{:}{::}}}{true}{false}}}}}{${if
>>>> pam{eitadmin:${sg{test}{:}{::}}}{true}{false}}}}'



-- 
Best wishes Victor Ustugov  mailto:victor@corvax.kiev.ua
public GnuPG/PGP key:       https://victor.corvax.kiev.ua/corvax.asc
ICQ UIN: 371808614          JID: corvax_at_nb@???
nic-handle: CRV-UANIC