[MDEV-25626] cracklib_password_check and two_password_validations plugins fail mysql-test-run Created: 2021-05-09  Updated: 2021-06-19  Resolved: 2021-06-19

Status: Closed
Project: MariaDB Server
Component/s: Authentication and Privilege System
Affects Version/s: 10.6.0
Fix Version/s: N/A

Type: Bug Priority: Trivial
Reporter: Rui Alves Assignee: Unassigned
Resolution: Incomplete Votes: 0
Labels: need_feedback
Environment:

Linux Ubuntu 18.04


Attachments: Text File cracklib_password_check.log     Text File two_password_validations.log    

 Description   

After installing and building MariaDB source, the script mysql-test-run fails at plugins.cracklib_password_check and plugins.two_password_validation.



 Comments   
Comment by Sergei Golubchik [ 2021-05-14 ]

How did you build it? In particular, what's the version of the libcrack that you have installed? Have you modified the libcrack dictionary file, and if not, what's the version of the package with the libcrack dictionary?

Comment by Rui Alves [ 2021-05-17 ]

I just pulled MariaDb 10.6 from GitHub and built it from scratch following the instructions on the webpage. I have not made any explicit or specific installation of libcrack. Neither have I changed anything. Should I install the latest version of libcrack?

Comment by Sergei Golubchik [ 2021-05-20 ]

The statement that fails is

grant select on *.* to foobar identified by 'q$%^&*rty'

A cracklib_password_check plugin asks libcrack to validate the password as specified above. Libcrack works by looking into system libcrack dictionary. Perhaps this password is present there on your system.

That's what we have in our 18.04 Ubuntu VM, where the test doesn't fail:

$ dpkg -l '*crack*'
Desired=Unknown/Install/Remove/Purge/Hold
| Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend
|/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad)
||/ Name             Version       Architecture Description
+++-================-=============-============-=======================================================
un  aircrack-ng      <none>        <none>       (no description available)
ii  cracklib-runtime 2.9.2-5build1 amd64        runtime support for password checker library cracklib2
ii  libcrack2:amd64  2.9.2-5build1 amd64        pro-active password checker library
ii  libcrack2-dev    2.9.2-5build1 amd64        pro-active password checker library - development files

Generated at Thu Feb 08 09:39:07 UTC 2024 using Jira 8.20.16#820016-sha1:9d11dbea5f4be3d4cc21f03a88dd11d8c8687422.