Re: [otrs] Login not functional under BSD - crypt() issue?

18 Sep 2005


      Did I post this issue to the appropriate list?  Is there anyone on this 
list running OTRS on FreeBSD?  If so, what version are you running?


On Thu, 15 Sep 2005, Wade Naveja wrote:
...
Greetings!
After installing OTRS 2.0.2, I am not able to login with the default 
username/password: root@localhost/root.
OTRS 2.0.2 is installed on a server running the following:
FreeBSD 5.4
Perl v5.8.6
Apache 2.0.54_2
MySQL 4.1.13
Login attempts generate the following in /var/log/messages:
Sep 15 12:56:34 hostname OTRS-CGI-10[17421]: 
[Notice][Kernel::System::Auth::DB::Auth] The crypt() of your mod_perl(2) 
is not working correctly! Update mod_perl!
Sep 15 12:56:34 hostname OTRS-CGI-10[17421]: 
[Notice][Kernel::System::Auth::DB::Auth] User: root@localhost 
authentication with wrong Pw!!! (REMOTE_ADDR: xxx.xxx.xxx.xxx)
The notice re: "The crypt() of your mod_perl(2) is not working correctly! 
Update mod_perl!" comes from this portion of Kernel/System/Auth/DB.pm:
# and do this check only in such case (unfortunately there is a 
mod_perl2
    # bug on RH8 - check if crypt() is working correctly) :-/
    if (($Salt =~ /^\$\d\$/) || (crypt('root', 'root@localhost') eq 
'roK20XGbWEsSM')) {
        $CryptedPw = crypt($Pw, $Salt);
    }
    else {
        $Self->{LogObject}->Log(
            Priority => 'notice',
            Message => "The crypt() of your mod_perl(2) is not working 
correctly! Update mod_perl!",
        );
        my $TempSalt = quotemeta($Salt);
        my $TempPw = quotemeta($Pw);
        my $CMD = "perl -e \"print crypt('$TempPw', '$TempSalt');\"";
        open (IO, " $CMD | ") || print STDERR "Can't open $CMD: $!";
        while (<IO>) {
            $CryptedPw .= $_;
        }
        close (IO);
        chomp $CryptedPw;
As stated above, the machine is not running mod_perl or Redhat Linux.
There is a difference between the crypt() functions on FreeBSD and Linux.
It appears that others have run into this issue in the past:
http://lists.otrs.org/pipermail/otrs/2004-April/004706.html
http://lists.otrs.org/pipermail/otrs-de/2005-August/004319.html
Can someone suggest a fix or work-around for this?
If additional system configuration information would be helpful, I'd be 
happy to provide it.
Regards,
Wade Naveja 
_______________________________________________
OTRS mailing list: otrs - Webpage: http://otrs.org/
Archive: http://lists.otrs.org/pipermail/otrs
To unsubscribe: http://lists.otrs.org/cgi-bin/listinfo/otrs
Support oder Consulting f�r Ihr OTRS System?
=> http://www.otrs.de/