Bug 716 – meaningless message about wrong base64 digest form

Bug 716 - meaningless message about wrong base64 digest form


Summary:	meaningless message about wrong base64 digest form

Status:	RESOLVED INVALID

Product:	Sudo
Classification:	Unclassified
Component:	Sudo
Version:	1.8.14
Hardware:	PC Linux

Importance:	low normal
Assigned To:	Todd C. Miller

URL:

Depends on:
Blocks:
	Show dependency tree / graph

Reported:	2015-09-01 06:56 MDT by Dalibor Pospíšil
Modified:	2015-09-01 07:24 MDT (History)
CC List:	0 users

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Dalibor Pospíšil 2015-09-01 06:56:01 MDT

Based on different bug, which patch dkopecek already proposed, I got following error message.

# tail -n 2 /etc/sudoers
Defaults !requiretty
testuser14969 ALL=NOPASSWD: sha224:6riice9nwc0N2aaqqCR3Kvxvdjcb7Z4akF/PvA== /tmp/tmp.vvH5rj6fOt/sha224_base64

# su -c 'sudo /tmp/tmp.vvH5rj6fOt/sha224_base64' - testuser14969
sudo: digest for /tmp/tmp.vvH5rj6fOt/sha224_base64 (6riice9nwc0N2aaqqCR3Kvxvdjcb7Z4akF/PvA==) is not in 6riice9nwc0N2aaqqCR3Kvxvdjcb7Z4akF/PvA== form

I guess the second hash should be some meaningful text.

Comment 1 Todd C. Miller 2015-09-01 07:10:57 MDT

I don't see how that can happen.  Here's what I get:

sudo: digest for /tmp/tmp.vvH5rj6fOt/sha224_base64 (6riice9nwc0N2aaqqCR3Kvxvdjcb7Z4akF/PvA==) is not in SHA224 form

Comment 2 Dalibor Pospíšil 2015-09-01 07:24:23 MDT

Ok, this means it was already fixed or we broken in some way. Thanks for that fast answer.