On Fri, 2011-12-16 at 11:53 +0100, Thorsten Kukuk wrote:
On Fri, Dec 16, Tomas Mraz wrote:
> The username matching in the pam_unix 'remember' feature implementation
> is incorrect. It will incorrectly match entries whose user name contains
> the searched user name as prefix. See also
>
https://bugzilla.redhat.com/show_bug.cgi?id=768087
>
> Although the remember feature is obsolete in favor of pam_pwhistory I
> think we should fix this bug.
>
> The attached patch fixes it, please review it.
Can there really be a "," after the username?
But it's fine for me.
In a well-formed opasswd file written by the current pam_unix or
pam_pwhistory no. However I put it there because the code in
check_old_password uses it as possible delimiter in the strtok_r()
calls.
--
Tomas Mraz
No matter how far down the wrong road you've gone, turn back.
Turkish proverb