Urs
09-28-2005, 01:12 PM
Another self-answering post!
I had this error, after up@#$%!@#$%!@#$%!@#$%!@#$%!@#$%! my qmail/vpopmail e-mail server, running Solaris 9. It occurred when users tried to access their POP3 or IMAP accounts. This is what happens:
Telnet to port 110
user me@there.com
pass guesswhat
-ERR, aack, child crashed
Connection closed.
I did some debugging. It turned out, that the encryption of the passwords used by vchkpw changed! Or actually the function crypt() changed. Before the upgrade, the scrambled password started with a "$1" and about 11 characters. Now, they are encoded much longer, like "$1$" and 8 characters, a "$" and 22 characters. The crypt() routine returned EINVAL when fed with the old style "salt", which is not checked within vchkpw and it crashes.
So the solution was to regenerate the passwords using vpasswd. This was easy, because I have the clear-text passwords, lucky I am!
Hope this information might someone save the weekend...
BTW: Don't ask me, why the encryption changed at all, with only doing the recommended patches.
-Urs
I had this error, after up@#$%!@#$%!@#$%!@#$%!@#$%!@#$%! my qmail/vpopmail e-mail server, running Solaris 9. It occurred when users tried to access their POP3 or IMAP accounts. This is what happens:
Telnet to port 110
user me@there.com
pass guesswhat
-ERR, aack, child crashed
Connection closed.
I did some debugging. It turned out, that the encryption of the passwords used by vchkpw changed! Or actually the function crypt() changed. Before the upgrade, the scrambled password started with a "$1" and about 11 characters. Now, they are encoded much longer, like "$1$" and 8 characters, a "$" and 22 characters. The crypt() routine returned EINVAL when fed with the old style "salt", which is not checked within vchkpw and it crashes.
So the solution was to regenerate the passwords using vpasswd. This was easy, because I have the clear-text passwords, lucky I am!
Hope this information might someone save the weekend...
BTW: Don't ask me, why the encryption changed at all, with only doing the recommended patches.
-Urs