Details
-
Type:
Bug
-
Status: Closed
-
Priority:
Major
-
Resolution: Fixed
-
Affects Version/s: 10.1.2
-
Fix Version/s: 10.1.3
-
Component/s: Packaging, Platform Debian
-
Labels:None
Description
I don't know whether there will be anything we can fix here, but at least we'll need to document limitations.
So far I couldn't build cracklib_password_check "normally".
Debian (Wheezy 64bit)
ii crack 5.0a-9.3 amd64 Password guessing program ii crack-common 5.0a-9.3 all Password guessing program ii cracklib-runtime 2.8.19-3 amd64 runtime support for password checker library cracklib2 ii libcrack2 2.8.19-3 amd64 pro-active password checker library ii libcrack2-dev 2.8.19-3 amd64 pro-active password checker library - development files
FascistCheckUser in crack - not found
Apparently (and Otto confirmed that I read it right), this https://launchpad.net/debian/+source/cracklib2/+changelog means that there is no (and will not be) FascistCheckUser for Wheezy. It will only be available for Jessie. So, no plugin on Debian.
Ubuntu (Trusty 64bit)
ii crack 5.0a-9.3 amd64 Password guessing program ii crack-common 5.0a-9.3 all Password guessing program ii cracklib-runtime 2.9.1-1build1 amd64 runtime support for password checker library cracklib2 ii libcrack2:amd64 2.9.1-1build1 amd64 pro-active password checker library ii libcrack2-dev 2.9.1-1build1 amd64 pro-active password checker library - development files $ ls /usr/include/crack.h /usr/include/crack.h
Looking for include file crack.h - not found
Trying to compile the header separately, I get this:
/usr/include/crack.h:32:41: error: unknown type name âsize_tâ
size_t errmsg_len);
^
I added the line to crack.h:
#include <stddef.h>
After that, the header builds and cmake "finds" it normally, and cracklib_password_check gets built. Obviously it's not the right way to do things, but I don't know what is.
Gliffy Diagrams
Attachments
Activity
- All
- Comments
- Work Log
- History
- Activity
- Transitions
I can fix the second issue, but not the first. Without FascistCheckUser() the only interface that cracklib provides is checking the password for the current user (“current” as in getuid()). This is not very useful.