Bug 344

Summary:	/usr/bin/passwd segfaults when using non-pwdb pam modules
Product:	[Retired] Red Hat Linux	Reporter:	Greg Retkowski <greg>
Component:	pwdb	Assignee:	Cristian Gafton <gafton>
Status:	CLOSED NOTABUG	QA Contact:
Severity:	medium	Docs Contact:
Priority:	medium
Version:	5.2
Target Milestone:	---
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	1998-12-10 23:53:40 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Greg Retkowski 1998-12-08 09:04:15 UTC

When using pam modules for naming services or authentication
databases not directly supported by pwdb (such as LDAP) the
passwd command will segfault. This is due to pwdb subverting
standard UNIX system calls that should be handled by the
Nameservice Switch (NSS) module (ie getpwuid, getpwnam).
Thus when a nameservice/pam module not known to pwdb is used
passwd.c (line 76) 'user' gets a null pointer and the
following strdup call causes a segmentation fault.

Comment 1 Cristian Gafton 1998-12-10 23:53:59 UTC

pwdb needs a rewrite to be able to deal with that situation.

A future version of pwdb will use the nss modules for perorming the
user lookups. For now, using other modules is not supported. And for
things like ldap one will need a special passwd program anyway.