Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 327605 - sys-apps/shadow-4.1.4.2-r3: newgrp always fails with "Invalid password"
Summary: sys-apps/shadow-4.1.4.2-r3: newgrp always fails with "Invalid password"
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: x86 Linux
: High normal (vote)
Assignee: Gentoo's Team for Core System packages
URL:
Whiteboard:
Keywords:
: 327881 (view as bug list)
Depends on:
Blocks: CVE-2010-0305
  Show dependency tree
 
Reported: 2010-07-09 11:00 UTC by Dirk Sondermann
Modified: 2010-07-13 21:43 UTC (History)
2 users (show)

See Also:
Package list:
Runtime testing required: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Dirk Sondermann 2010-07-09 11:00:33 UTC 
With sys-apps/shadow-4.1.4.2-r3, which was marked stable for x86 as of 03 July 2010, newgrp always fails with the error message "Invalid password" when a non-root user tries to switch to a password protected group.

Reproducible: Always

Steps to Reproduce:
1. Create a new group: groupadd testgroup
2. Set a password for this group: gpasswd testgroup
3. Try to switch to the group as a non-root user: newgrp testgroup
4. At the "Password:" prompt, enter the correct password.
Actual Results:  
newgrp says "Invalid password." and returns exit status 1.

Expected Results:  
newgrp succeeds in switching to the new group.

This is an upstream bug (http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=569899) which may easily be fixed by adding the existing patch (fix-etc-gshadow-reading.patch) to the ebuild.
Comment 1 SpanKY gentoo-dev 2010-07-10 00:47:41 UTC 
added the fix to 4.1.4.2-r4, thanks for the research
Comment 2 Jeroen Roovers (RETIRED) gentoo-dev 2010-07-12 23:52:53 UTC 
*** Bug 327881 has been marked as a duplicate of this bug. ***