search for: verify_plain

...and ldap-provided passwords causing a false 'password mismatch' situation, while using PLAIN mechanism with LDAP authentication. As a matter of fact, the user provided by the user, as read in the 'mech_plain_auth_continue' function is passed as an argument in the 'auth_request_verify_plain' function which, in turns pass it to the function pointed to by 'passdb->verify_plain' (that is 'ldap_verify_plain') which doesn't use it [instead maybe of setting the 'passdb_ldap_request' 'password' field with it ?]. So once back from the LDAP request,...

...> 23 if (strcmp(iface->name, name) == 0) > (gdb) n > 20 array_foreach(&passdb_interfaces, ifaces) { > (gdb) > 26 return NULL; > (gdb) > 27 } > (gdb) > passdb_register_module (iface=0x280120) at passdb.c:34 > 34 if (old_iface != NULL && old_iface->verify_plain == NULL) { > (gdb) > 37 } else if (old_iface != NULL) { > (gdb) > 41 array_append(&passdb_interfaces, &iface, 1); > (gdb) > 42 } > (gdb) > passdbs_init () at passdb.c:314 > 314 passdb_register_module(&passdb_sql); > (gdb) > 315 passdb_register_module...

...; + reply.id = auth_request->id; + reply.result = AUTH_CLIENT_RESULT_CONTINUE; + + reply.reply_idx = 0; + reply.data_size = strlen(prompt2); + callback(&reply, prompt2, auth_request->conn); + } else { + char *pass = p_strndup(unsafe_data_stack_pool, data, data_size); + + passdb->verify_plain(auth_request, pass, verify_callback); + + safe_memset(pass, 0, strlen(pass)); + } + + return TRUE; +} + +static int +mech_login_auth_initial(struct auth_request *auth_request, + struct auth_client_request_new *request, + const unsigned char *data __attr_unused__, + mech_cal...

...ssdb_module_interface *iface = *ifaces; (gdb) 23 if (strcmp(iface->name, name) == 0) (gdb) n 20 array_foreach(&passdb_interfaces, ifaces) { (gdb) 26 return NULL; (gdb) 27 } (gdb) passdb_register_module (iface=0x280120) at passdb.c:34 34 if (old_iface != NULL && old_iface->verify_plain == NULL) { (gdb) 37 } else if (old_iface != NULL) { (gdb) 41 array_append(&passdb_interfaces, &iface, 1); (gdb) 42 } (gdb) passdbs_init () at passdb.c:314 314 passdb_register_module(&passdb_sql); (gdb) 315 passdb_register_module(&passdb_sia); (gdb) 316 passdb_register_mod...

Sadly, that doesn?t help either. Over the past day, I?ve built and installed a different branch of the OS (stable/11, instead of release/11.1), to see if a new compiler/libc might change things. Sadly, it does not. In the same situation now, auth fails immediately with signal 11. Running gdb on auth (from build dir, compiled -g -O2) shows something similar. - Chris # gdb