Package: tiger
Version: 1:3.2.3-3
Severity: normal

Steps to reproduce:
1) sudo adduser testuser1
2) sudo /usr/lib/tiger/scripts/check_passwd
3) /usr/lib/tiger/scripts/check_passwd
4) (sudo deluser --remove-home testuser1 to undo step 2)

Expected results:
3) tiger does not report warnings

Actual results:
3) tiger prints

--WARN-- [pass014w] Login (testuser) is disabled, but has a valid shell.

even though the account is enabled.

More info:
1) apparently tiger does not seem to recognize SHA512 hashes:

$ sudo grep testuser /etc/shadow
testuser1:$6$ATwzsTXf$QY/T9crApfPR.Cv.wgYPV5EhLunUbqsetnxgbM5VqleuX59PX/3oRektWCRrUbuu4HVJLnSBHulZgTq18jgeI.:14741:0:99999:7:::

2) I wrote a patch and sent it upstream at

https://savannah.nongnu.org/patch/index.php?7186

-- System Information:
Debian Release: squeeze/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.32-3-amd64 (SMP w/1 CPU core)
Locale: LANG=C, LC_CTYPE=fi_FI (charmap=ISO-8859-1)
Shell: /bin/sh linked to /bin/dash

Versions of packages tiger depends on:
ii  binutils                      2.20.1-9   The GNU assembler, linker and bina
ii  bsdmainutils                  8.0.10     collection of more utilities from 
ii  debconf [debconf-2.0]         1.5.32     Debian configuration management sy
ii  libc6                         2.10.2-6   Embedded GNU C Library: Shared lib
ii  net-tools                     1.60-23    The NET-3 networking toolkit
ii  ucf                           3.0025     Update Configuration File: preserv

Versions of packages tiger recommends:
ii  chkrootkit                    0.49-4     rootkit detector
ii  exim4-daemon-light [mail-tran 4.71-4     lightweight Exim MTA (v4) daemon
ii  john                          1.7.3.1-1  active password cracking tool

Versions of packages tiger suggests:
ii  lsof                       4.81.dfsg.1-1 List open files

-- debconf information:
  tiger/mail_rcpt: root
  tiger/policy_adapt:



-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to