help-shishi
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Tickets with instance names.


From: Simon Josefsson
Subject: Re: Tickets with instance names.
Date: Thu, 16 Aug 2012 08:39:42 +0200
User-agent: Gnus/5.130006 (Ma Gnus v0.6) Emacs/23.3 (gnu/linux)

Mats Erik Andersson <address@hidden> writes:

> onsdag den 15 augusti 2012 klockan 23:03 skrev Simon Josefsson detta:
>> 
>> I could confirm this -- there were two different problems:
>> 
>> 1) The parsing bug that we fixed.
>> 
>> 2) Shisa doesn't derive the salt for foo/address@hidden principals correctly,
>>    it should be "bazfoobar" but it will use "bazfoo/bar" instead.  The
>>    bug is in shishi_derive_default_salt.
>> 
>> As a workaround, when adding the user/admin user, specify the --salt
>> parameter, like this:
>> 
>> shisa -a --password --salt interop.josefsson.orguseradmin
>> interop.josefsson.org user/admin
>> 
>> then it should work.  Use -n instead of -a to update the key.
>
> I can confirm that this work around is functional, but I am
> puzzled that two different keys present in "shishi.keys" still
> do not confuse the execution. Probably intended, but unexpected.
>
> Anyway, this work around clearly indicates that 2. is at the core
> of the present problem.

I have fixed the 2 bug now.  The shishi.keys file can contain several
keys (different enctypes, different salt, etc) and the code should find
the right one for each situation.

/Simon



reply via email to

[Prev in Thread] Current Thread [Next in Thread]