Hash-based Authentication Broken
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
zoneminder (Ubuntu) |
Invalid
|
Undecided
|
Unassigned |
Bug Description
Binary package hint: zoneminder
The ZoneMinder Streaming Server (/usr/lib/
From the changelog:
zoneminder (1.22.3-1) unstable; urgency=low
* Initial Version. (closes: #248393)
* Patched out use of openssl; uses gnutls instead for MD5 hashes.
From my limited testing, the whole ZoneMinder system got patched except for zms.
After installing from this package and enabling hash-based authentication, zms barfs this into the syslog over and over:
zms[7823]: ERR [Unable to authenticate user]
zms[7824]: ERR [You need to build with openssl installed to use hash based authentication]
Installing libssl-dev and building from official ZoneMinder source (without ubuntu patches) results in a working zms.
Seems like zms still needs to be patched.
Is this symptom still reproducible in 8.10 beta or later?