[lsb-discuss] [Bug 1416] New: pam_chauthtok has special requirements on /etc/login.defs

bugzilla-daemon at freestandards.org bugzilla-daemon at freestandards.org
Thu Jun 22 04:56:21 PDT 2006


Test ID: LSB.pam/testcases/pam_chauthtok.1,2,8

Problem Synopsis: PASS_MIN_DAYS  !=  0 in /etc/login.defs on install time
leads to failing test

On the the tested system the file "/etc/login.defs" has set "PASS_MIN_DAYS 7".

That's why when the vsxgen users are created, the entry in /etc/shadow is
created as follows:

vsx0:bC5DIOJ4AdVVs:13315:7:45:7:::

That means the password can be changed only once in 7 days by the user.
That leads to a "Fail" of the described tests (See report below)

In LSB there is no default value "PASS_MIN_DAYS 0" 
specifified, so the test should make sure it is set to 0 - either before or as a
part of the test (e.g. by using the C interfaces like the passwd program)


At least there should be a note, that the test will fail with such a system
configuration.


Solution:

the /etc/shadow entry for vsx0 could be reviewed and, if needed, corrected
before running the tests.
It would be possible to use a C interface like the passwd program for this
(http://cvs.pld.org.pl/shadow/src, http://cvs.pld.org.pl/shadow/lib)

Another possibility would be to do this as part of the pre/postinst script of
the rpm.


report:

***************************************************************
        /tset/LSB.pam/testcases/pam_chauthtok/pam_chauthtok 1   Failed

                Test Information:
        Sending password test
         pam_chauthtok returned Authentication token manipulation error when
                expected to succeed
        
***************************************************************
***************************************************************
        /tset/LSB.pam/testcases/pam_chauthtok/pam_chauthtok 2   Failed

                Test Information:
        Sending password test
         pam_chauthtok failed with correct password and
         PAM_DISALLOW_NULL_AUTHTOK when expected to succeed.
         It returned Authentication token manipulation error
        
***************************************************************
***************************************************************
        /tset/LSB.pam/testcases/pam_chauthtok/pam_chauthtok 8   Failed
                Test Information:
        Sending password test
         pam_chauthtok returned Authentication token manipulation error
         It was expected to return PAM_AUTHTOK_LOCK_BUS
        
***********************************************************************   
 
--    
Configure bugmail: http://bugs.linuxbase.org/userprefs.cgi?tab=email   
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.




More information about the lsb-discuss mailing list