[Top][All Lists]
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Tickets with instance names.
From: |
Simon Josefsson |
Subject: |
Re: Tickets with instance names. |
Date: |
Thu, 16 Aug 2012 08:39:42 +0200 |
User-agent: |
Gnus/5.130006 (Ma Gnus v0.6) Emacs/23.3 (gnu/linux) |
Mats Erik Andersson <address@hidden> writes:
> onsdag den 15 augusti 2012 klockan 23:03 skrev Simon Josefsson detta:
>>
>> I could confirm this -- there were two different problems:
>>
>> 1) The parsing bug that we fixed.
>>
>> 2) Shisa doesn't derive the salt for foo/address@hidden principals correctly,
>> it should be "bazfoobar" but it will use "bazfoo/bar" instead. The
>> bug is in shishi_derive_default_salt.
>>
>> As a workaround, when adding the user/admin user, specify the --salt
>> parameter, like this:
>>
>> shisa -a --password --salt interop.josefsson.orguseradmin
>> interop.josefsson.org user/admin
>>
>> then it should work. Use -n instead of -a to update the key.
>
> I can confirm that this work around is functional, but I am
> puzzled that two different keys present in "shishi.keys" still
> do not confuse the execution. Probably intended, but unexpected.
>
> Anyway, this work around clearly indicates that 2. is at the core
> of the present problem.
I have fixed the 2 bug now. The shishi.keys file can contain several
keys (different enctypes, different salt, etc) and the code should find
the right one for each situation.
/Simon