[Pkg-cups-devel] Bug#425701: authentication problems due to wrong filename in /etc/pam.d

[root]

Package: cupsys
Version: 1.2.11-2
Severity: normal

--- Please enter the report below this line. ---
The cupsys package provides the file /etc/pam.d/cupsys, while the daemon 
auxilliary program cups-check-pam-auth tries to open /etc/pam.d/cups and, 
failing that (which is likely unless a custom file was created by the 
user) it falls back to opening /etc/pam.d/other. In default installations 
this goes unnoticed, since the default /etc/pam.d/other file is equivalent 
to /etc/pam.d/cupsys, as far as authentication is concerned. But if the 
/etc/pam.d/other was modified, authentication may have quite unexpected 
results. This bug happened a couple of times already in past years, it was 
reported (sometimes by me) and corrected, but alas it always finds a way 
to resurface, probably because upstream uses /etc/pam.d/cups instead of 
/etc/pam.d/cupsys and it's easy to overlook one change in pam library 
calls. Wouldn't it be easier to just use /etc/pam.d/cups as in upstream 
and forget it?

Thanks, bye
Giacomo Mulas

--- System information. ---
Architecture: amd64
Kernel:       Linux 2.6.21-ck2-turion64-jak

Debian Release: lenny/sid
    500 unstable        www.debian-multimedia.org
    500 unstable        ftp.de.debian.org
    500 stable          tddft.org

--- Package information. ---
Depends               (Version) | Installed
===============================-+-==============
libc6                (>= 2.5-5) | 2.5-8
libcupsimage2        (>= 1.2.5) | 1.2.11-2
libcupsys2           (>= 1.2.7) | 1.2.11-2
libdbus-1-3           (>= 0.94) | 1.0.2-5
libgnutls13        (>= 1.5.3-0) | 1.6.2-2
libldap2          (>= 2.1.17-1) | 2.1.30-13.4
libpam0g              (>= 0.76) | 0.79-4
libpaper1                       | 1.1.21
libslp1                         | 1.2.1-6.2
zlib1g             (>= 1:1.2.1) | 1:1.2.3-15
adduser               (>= 3.12) | 3.102
debconf             (>= 1.2.9)  | 1.5.13
   OR debconf-2.0                 | 
patch                           | 2.5.9-4
poppler-utils                   |
   OR xpdf-utils                  | 3.02-1
perl-modules                    | 5.8.8-7
procps                          | 1:3.2.7-3
gs-esp                          | 8.15.3.dfsg.1-1
lsb-base                 (>= 3) | 3.1-23.1
cupsys-common                   | 1.2.11-2



-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.