Ubuntu
tacacs+ package

  1. Bug #1435632
  2. Comment #0

Comment 0 for bug 1435632

Revision history for this message
David Leonard (d+) wrote :

When authenticating some users, tac_plus will check system passwords, and crash of the account is disabled.

To reproduce: set the system password (/etc/shadow) of a tac+ authenticated user to "!"; then try authenticating from a remote client (in my case with pam_tacplus); the tac_plus server will fault inside strcmp; first parameter passwd to strcmp is (NULL, ...) because crypt(,"!") returned NULL.

Patch attached.