search for: bigcrypt

Hi, we are currently in the progress of switching an HPUX mailserver to linux and dovecot. The only issue so far is, that HPUX has bigcrypt for passwords > 8 chars. Bigcrypt uses standard libc crypt for every block of 8 chars. The linux pam modules have a bigcrypt.c file which can be used for dovecot as well to authenticate crypt and bigcrypt passwords. I have used the pam bigcrypt.c code to patch the mycrypt.c dovecot file. May...

I read the exchange regarding > 8 char passwords on Unixware from the end of June. Is anything being done to add support for >8 character passwords on SCO OSR6 (in udk mode)? I have it working by calling osr5bigcrypt(), instead of bigcrypt(), in openbsd-compat/xcrypt.c and linking with -lcrypt. libcrypt has bigcrypt(), but for whatever reason, openssh built with it fails to authenticate passwords >8 chars in length. bigcrypt() is not documented as being available in udk mode, and osr5bigcrypt() is not docum...

...ll of this well enough to make a proper patch to include new defines and what not. I tried and made a mess. Hopefully I can get a better grasp this weekend. The only files I changed were xcrypt.c and Makefile. Makefile needed -lcrypt and -liaf added to LIBS=. It had -lcrypto but needed -lcrypt for bigcrypt() xcrypt.c needed: - #include <ia.h> - xcrypt() needed to call bigcrypt() - shadow_pw() needed this, although it didn't really belong there: uinfo_t uinfo; ia_openinfo(pw->pw_name, &uinfo); ia_get_logpwd(uinfo, &pw_password); ia_closeinfo(uinfo);

...h-passwd.c will fail for users whose passwords are longer than 8 characters. The "traditional" level of security installs with u_pwseg#1, so most users would never encounter this problem. This has been an issue in openssh since I started using it several versions ago. The fix is to use bigcrypt() rather than crypt() for OpenServer. bigcrypt() works in all cases I believe, regardless of password size or u_pwseg setting. Below is a patch to auth-passwd.c which corrects the problem. I subscribed to the openssh-unix-dev list just today to receive any replies/comments to this post. Apologie...

.../rpc/rpc.h:61, from /usr/include/rpcsvc/nis.h:9, from /usr/include/prot.h:23, from xcrypt.c:35: /usr/include/machine/sys/setjmp.h:45: redefinition of `struct label_t' xcrypt.c: In function `xcrypt': xcrypt.c:70: warning: passing arg 1 of `bigcrypt' discards qualifiers from pointer target type xcrypt.c:70: warning: passing arg 2 of `bigcrypt' discards qualifiers from pointer target type *** Error exit code 1 Stop. *** Error exit code 1 Stop. I ran configure as follows: ./configure --with-ssl-dir=/usr/local/ssl --with-pam --wit...

...mpile Samba 1.9.16p10 on SCO Openserver 3.2.2 (native compiler). Here's a small patch that fixes this problem: ----cut here---- *** includes.h.orig Sun Feb 23 04:26:40 1997 --- includes.h Mon Jun 30 16:18:27 1997 *************** *** 668,692 **** #include <prot.h> #define crypt bigcrypt #endif - #ifndef EVEREST - #define ftruncate(f,l) syscall(0x0a28,f,l) - #endif #define SIGNAL_CAST (void (*)(int)) #define USE_WAITPID #define USE_GETCWD #define USE_SETSID #ifdef SCO3_2_2 ! #define NO_EID #else #ifndef EVEREST #define USE_IFREQ #endif #endif #define STATF...

...from /usr/include/rpcsvc/nis.h:9, > from /usr/include/prot.h:23, > from xcrypt.c:35: > /usr/include/machine/sys/setjmp.h:45: redefinition of `struct label_t' > xcrypt.c: In function `xcrypt': > xcrypt.c:70: warning: passing arg 1 of `bigcrypt' discards qualifiers > from pointer target type > xcrypt.c:70: warning: passing arg 2 of `bigcrypt' discards qualifiers > from pointer target type > make[1]: *** [xcrypt.o] Error 1 > make[1]: Leaving directory > `/disks/tousers01/chiwong/openssh/openssh-3.7.1p1/openbsd-com...

...et_auth_parameters... (cached) no > checking for getspnam in -lgen... no > checking for getspnam... no > checking for getspnam in -lsecurity... no > checking for getspnam... (cached) no > checking for getspnam in -lsec... no > checking for getspnam... (cached) no > checking for bigcrypt in -lsecurity... no > checking for bigcrypt... no > checking for bigcrypt in -lsec... no > checking for bigcrypt... (cached) no > checking for getprpwnam in -lsecurity... no > checking for getprpwnam... no > checking for getprpwnam in -lsec... no > checking for getprpwnam... (c...

...rstly, I needed to download, compile and install OpenSSL, EGD and ZLib. Specific issues: configure did not handle hpux 11 login.c did not compile makefile did not use $(CFLAGS) sshd did not compile (pam issues), I wanted to use supplied pam library I use long passwords, > 8 chars, needed bigcrypt() Solutions for configure: I added the following to the configure script: *-*-hpux11*) if test -z "$GCC"; then CFLAGS="$CFLAGS -Ae" fi CFLAGS="$CFLAGS -D_HPUX_SOURCE" cat >> confdefs.h <<\EOF #define IPA...

...need to provide a way to change an expired password. I'd like to look at building a password abstraction layer where all the platform dependent password code resides. This includes various interfaces to shadow and protected password information, password aging, and password formats (crypt(), bigcrypt(), MD5). This will serve to clean up auth-passwd.c and auth.c and probably some other stuff. Is this a good direction?

...eters in -lsec... no checking for set_auth_parameters... (cached) no checking for getspnam in -lgen... no checking for getspnam... no checking for getspnam in -lsecurity... no checking for getspnam... (cached) no checking for getspnam in -lsec... no checking for getspnam... (cached) no checking for bigcrypt in -lsecurity... no checking for bigcrypt... no checking for bigcrypt in -lsec... no checking for bigcrypt... (cached) no checking for getprpwnam in -lsecurity... no checking for getprpwnam... no checking for getprpwnam in -lsec... no checking for getprpwnam... (cached) no checking ability to build...

...auth-sia.o md5crypt.o audit.o audit-bsm.o platform.o -L. -Lopenbsd-compat/ -L/usr/local/ssl/lib -L/usr/local/lib -lssh -lopenbsd-compat -lresolv -liaf -lcrypto -lsocket -lnsl -lgen -lz -lcrypt Undefined first referenced symbol in file osr5bigcrypt openbsd-compat//libopenbsd-compat.a(port-uw.o) UX:ld: ERROR: sshd: fatal error: Symbol referencing errors. No output written to sshd *** Error code 1 (bu21) UX:make: ERROR: fatal error. # uname -a UnixWare newspo 5 7.1.0 i386 x86at SCO UNIX_SVR5 ===========================================...

...eters in -lsec... no checking for set_auth_parameters... (cached) no checking for getspnam in -lgen... no checking for getspnam... no checking for getspnam in -lsecurity... no checking for getspnam... (cached) no checking for getspnam in -lsec... no checking for getspnam... (cached) no checking for bigcrypt in -lsecurity... no checking for bigcrypt... no checking for bigcrypt in -lsec... no checking for bigcrypt... (cached) no checking for getprpwnam in -lsecurity... no checking for getprpwnam... no checking for getprpwnam in -lsec... no checking for getprpwnam... (cached) no checking ability to build...

...parameters configure:7611: checking for getspnam in -lgen configure:7660: checking for getspnam configure:7773: checking for getspnam in -lsecurity configure:7822: checking for getspnam configure:7934: checking for getspnam in -lsec configure:7983: checking for getspnam configure:8096: checking for bigcrypt in -lsecurity configure:8145: checking for bigcrypt configure:8257: checking for bigcrypt in -lsec configure:8306: checking for bigcrypt configure:8419: checking for getprpwnam in -lsecurity configure:8468: checking for getprpwnam configure:8580: checking for getprpwnam in -lsec configure:8629: che...

http://bugzilla.mindrot.org/show_bug.cgi?id=633 Summary: Password authentication fails in HP-UX trusted mode due to DISABLE_SHADOW Product: Portable OpenSSH Version: -current Platform: HPPA OS/Version: HP-UX Status: NEW Severity: normal Priority: P2 Component: sshd AssignedTo:

.... no checking for set_auth_parameters... no checking for set_auth_parameters in -lsec... no checking for set_auth_parameters... (cached) no checking for getspnam in -lsecurity... no checking for getspnam... yes checking for getspnam in -lsec... yes checking for getspnam... (cached) yes checking for bigcrypt in -lsecurity... no checking for bigcrypt... no checking for bigcrypt... (cached) no checking for getprpwnam in -lsecurity... no checking for getprpwnam... no checking for getprpwnam... (cached) no checking whether gcc accepts -fpic... yes checking for long long... yes checking for 64 bit off_t......

I've downloaded the binary Samba 2.0.7 for AIX. I have no idea how to install this critter. Can anyone walk me thru this step by step? I think once i have it running, I'll be able to configure it based on the info at samba.org. It's just getting it running that troubles me. I have some experience with *nix, but not with compliling (sorry, no C compliler on system) and installing

...ecurity... no checking for set_auth_parameters... yes checking for set_auth_parameters... (cached) yes checking for getspnam in -lgen... no checking for getspnam... yes checking for getspnam in -lsecurity... no checking for getspnam... (cached) yes checking for getspnam... (cached) yes checking for bigcrypt in -lsecurity... no checking for bigcrypt... yes checking for bigcrypt... (cached) yes checking for getprpwnam in -lsecurity... no checking for getprpwnam... yes checking for getprpwnam... (cached) yes checking ability to build shared libraries... false checking linker flags for shared libraries......

...uth_parameters... (cached) no checking for getspnam in -lgen... (cached) no checking for getspnam... (cached) yes checking for getspnam in -lsecurity... (cached) no checking for getspnam... (cached) yes checking for getspnam in -lsec... (cached) no checking for getspnam... (cached) yes checking for bigcrypt in -lsecurity... (cached) no checking for bigcrypt... (cached) no checking for bigcrypt in -lsec... (cached) no checking for bigcrypt... (cached) no checking for getprpwnam in -lsecurity... (cached) no checking for getprpwnam... (cached) no checking for getprpwnam in -lsec... (cached) no checking f...

Hello, I am running HP-UX 11 with Samba 2.2.5 binaries for HPUX and I keep getting the error that Samba can't find the unicode_map.xxx file. Well, I notice that all I have in /usr/local/samba/lib/codepages is codepage type files, not unicode. Why do the binaries not include a compiled make_unicodemap? I did download the source and found the .c file for the command. When I try to run