[Pkg-ltsp-devel] Bug#482553: ldm: password change doesn't work

[Vagrant Cascadian]

found 482553 2:2.0.5-1
thanks

On Fri, May 23, 2008 at 03:59:18PM +0200, John S. Skogtvedt wrote:
> When trying to log in as a user with an expired password,
> I experienced the following problems:
> 
> 1) ldm first prompted for new password, and then prompted again (to confirm).
>   After that it got stuck - I could enter text, but nothing happened.
> 2) ldm doesn't check if the new password is equal to the old password.
>   If it is, then the password won't be succesfully changed.
> 3) (with 1 and 2 fixed) ldm incorrectly zeros the password,
>   so that the user has to enter the new password again to log in after
>   a password change.
> 
> I have attached a patch which should fix these problems.

thanks for the patch, i tested it and it seems to address the issues
mentioned.

unfortunately additional checks, possibly not present on etch, also
cause it to hang at the verifying password phase.  two that i found were
if the password is too similar to the previous password or if the
password is too short- these are likely common issues as well. i suspect
there are more.

the good news is that this part of ldm is currently being discussed by
ltsp developers, as it's totally broken for opensuse and gentoo's
password expiry, as they have totally different text.

live well,
  vagrant