URL:
https://github.com/SSSD/sssd/pull/5682
Title: #5682: bugfix for newline char in sss_obfuscate
rajsshah86 commented:
"""
Hi, can you tell us how to reproduce the issue you are seeing?
@pbrezina
Follow the below steps to reproduce the issue.
1. Encrypt the password for ldap account using sss_obfuscate command using -s option
`sss_obfuscate -d <Domain_NAME> -s < <Name_OF_FILE_CONTAINING_PASSWORD>`
Above step will encrypt the password in sssd.conf file.
2. If you now restart the sssd process , it will complain about "Authentication
Failure"
3. Download the decrypter from
(
https://github.com/mludvig/sss_deobfuscate/blob/master/sss_deobfuscate)
4. Decrypt password using command
`python <SCRIPT_PATH> <obfuscate_password_from_sssd_file>`
eg.
python /home/raj/sssddecode.py
AAAQAJgynPs0ig4TFboLoXjVPIhLDE4up4FBqrQp3bT3qqj0eCrx0ki69PhFZA6a416ZUsiYYiqcmoxFj4wEDEQVPqYAAQID
You will see a newline in the password.
![image](https://user-images.githubusercontent.com/38250316/122750296-9b711300-d28e-11eb-859d-0ec370d79e71.png)
5. Apply the patch I have provided.
6. Repeat the step 1-4 and you can see that connection is made successful because there is
no newline in the encrypted password.
"""
See the full comment at
https://github.com/SSSD/sssd/pull/5682#issuecomment-864933224