Openwall GNU/*/Linux Users Mailing List

Solar Designer | 6 Jan 2006 10:01

crypt_blowfish 1.0

Hi,

Marko Kreen has discovered and reported a minor security bug in our
password hashing package, crypt_blowfish 0.4.7 and below.  In response
to this, I've released crypt_blowfish 1.0, with the bug fixed:

	http://www.openwall.com/crypt/

Since no other significant changes to the code have been made (or needed
to be made) in a long time (despite active use of crypt_blowfish in a
number of projects), I am considering this version mature enough to be
called 1.0.

The bug fixed with this release affected the way salts for extended
DES-based and for MD5-based password hashes were generated with the
crypt_gensalt*() family of functions.  It would result in a higher than
expected number of matching salts with large numbers of password hashes
of the affected types.  crypt_gensalt*()'s functionality for
Blowfish-based (bcrypt) hashes that crypt_blowfish itself implements and
for traditional DES-based crypt(3) hashes was not affected.

Since bcrypt hashes were not affected, default installs of Owl were not
affected either.  The specific impact this could have on non-default
installs of Owl is described in the latest Owl-current change log entry
for glibc:

	http://www.openwall.com/Owl/CHANGES-current.shtml

At this time, a similar glibc update for Owl 1.1-stable is not planned.
Instead, we're planning to make another official release of Owl which

(Continue reading)

Bernhard Fischer | 11 Jan 2006 07:14

ntpd terminates right after starting

Someone mailed problems with openntp last Dez. Now i am in the same
situation. Right after starting the daemon the forked child terminates
and that's it. Strace does not show me any usefull hints (socketpair()
is suspected for me to fail in this situation?).

The very strange thing is: i do have 2 machines (mostly the same
hardware and package releases) and only on one of them i can startup
ntpd. The problem is reproducible on the other one, when i use a kernel
with QOS (i have to use traffic-shaping on this gateway). I tried
several kernel options to isolate the reason, but without success for
now. I am only able to test outside office hours, because it is a
productive machine.

Anyone out there with the straight tipp for me?!?

Greetings
Bernhard

Solar Designer | 11 Jan 2006 15:19

Re: ntpd terminates right after starting

On Wed, Jan 11, 2006 at 07:14:56AM +0100, Bernhard Fischer wrote:
> Someone mailed problems with openntp last Dez.

Those were not "real" problems.  Some log file messages were confusing,
that's all.

> Now i am in the same
> situation. Right after starting the daemon the forked child terminates
> and that's it. Strace does not show me any usefull hints (socketpair()
> is suspected for me to fail in this situation?).
> 
> The very strange thing is: i do have 2 machines (mostly the same
> hardware and package releases) and only on one of them i can startup
> ntpd.

Now this does sound like a real problem.  Please place your strace
output on a private URL and post that.  We'll have a look.

Thanks,

--

-- 
Alexander Peslyak <solar at openwall.com>
GPG key ID: B35D3598  fp: 6429 0D7E F130 C13E C929  6447 73C3 A290 B35D 3598
http://www.openwall.com - bringing security into open computing environments

Bernhard Fischer | 12 Jan 2006 08:46

Re: ntpd terminates right after starting

Hi Alexander,

this behavior occurs not on every machine from mine as i said before,
but always when i activate the Link Eqaulizer net/sched/sch_teql.c
(CONFIG_NET_SCH_TEQL not as module) which itself generates a new teql
network-device. So what?!? Does it also count that there are 4 eths on
the problematic one and only 2 eths on the other one? I will test this
machine with the same network components.
strace does not show as much as hoped for. It would be more important to
see when/why the forked client terminates. I have to do more logging!

Here are the last 30 lines of strace from "ntpd -d -f /etc/ntpd.conf":
....
read(3, "J\211\213\4^CQ}\2\222\263\301G\267%F4\373U\276\341iZ\244"...,
32) = 32
close(3)                                = 0
getpid()                                = 408
getpid()                                = 408
getuid32()                              = 0
getpid()                                = 408
time(NULL)                              = 1137015810
getpid()                                = 408
stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=837, ...}) = 0
socketpair(PF_FILE, SOCK_STREAM, 0, [3, 4]) = 0
fork()                                  = 409
--- SIGCHLD (Child exited)  <at>  0 (0) ---
rt_sigaction(SIGTERM, {0x8049900, [TERM], SA_RESTORER|SA_RESTART,
0x256428}, {SIG_DFL}, 8) = 0
rt_sigaction(SIGINT, {0x8049900, [INT], SA_RESTORER|SA_RESTART,
0x256428}, {SIG_DFL}, 8) = 0

(Continue reading)

Solar Designer | 12 Jan 2006 08:46

Re: ntpd terminates right after starting

On Thu, Jan 12, 2006 at 08:46:14AM +0100, Bernhard Fischer wrote:
> strace does not show as much as hoped for. It would be more important to
> see when/why the forked client terminates. I have to do more logging!

You should be using "strace -fF".

> If you are interrested in more info (full strace, kernel config) please
> mail me and i will send it directly to you.

Yes, but I'd rather have others involved with Owl help deal with this, --
which is why I've suggested placing your stuff on a private URL + posting
that to the list instead of sending it all to me privately.

--

-- 
Alexander Peslyak <solar at openwall.com>
GPG key ID: B35D3598  fp: 6429 0D7E F130 C13E C929  6447 73C3 A290 B35D 3598
http://www.openwall.com - bringing security into open computing environments

Was I helpful?  Please give your feedback here: http://rate.affero.net/solar

Randy Greif | 14 Jan 2006 21:16

Settle


I am a first time user of any linux based system.
I am trying to install Owl on a server, Compaq PIII zeon 733 system the owl
1.1 iso I downloaded seems fine it boots the sytem up and brings it to a
login--password etc. seems to be no problem there. The install says to type
"settle" to install when I type settle it says command not found. I am a
complete novice  with this so remember I am a windows individual trying to
install Owl.

Randy Greif

--
No virus found in this outgoing message.
Checked by AVG Free Edition.
Version: 7.1.371 / Virus Database: 267.14.17/229 - Release Date: 1/13/2006

--
No virus found in this outgoing message.
Checked by AVG Free Edition.
Version: 7.1.371 / Virus Database: 267.14.17/229 - Release Date: 1/13/2006

Randy Greif | 14 Jan 2006 21:27

RE: Settle


Randy Greif
ERA Real Estate Professionals
3745 Center Point Road
Cedar Rapids, Iowa 52402
Office (319) 395-0411
Cell: (319) 389-2101
Fax: (319) 395-0417
randal.greif <at> era.com <mailto:randal.greif <at> era.com> 
Licensed in the state of Iowa

-----Original Message-----
From: Randy Greif [mailto:rcgreif <at> mcleodusa.net]
Sent: Saturday, January 14, 2006 2:16 PM
To: owl-users <at> lists.openwall.com
Subject: [owl-users] Settle

I am a first time user of any linux based system.
I am trying to install Owl on a server, Compaq PIII zeon 733 system the owl
1.1 iso I downloaded seems fine it boots the sytem up and brings it to a
login--password etc. seems to be no problem there. The install says to type
"settle" to install when I type settle it says command not found. I am a
complete novice  with this so remember I am a windows individual trying to
install Owl.

Randy Greif

--
No virus found in this outgoing message.
Checked by AVG Free Edition.

(Continue reading)

Solar Designer | 14 Jan 2006 21:40

Re: Settle

Randy,

"settle" is currently only available in Owl-current, not in the older
1.1 release.  The installation instructions that you see on the website
start with this remark:

"The instructions below apply to Owl-current snapshots dated 2005/08/08
and newer (until revised).  For older versions of Owl (such as the 1.1
release), please refer to Owl/doc/INSTALL as included in the "native"
tree for your version (that's /usr/src/world/native/Owl/doc/INSTALL on
the CDs)."

So you would need to refer to /usr/src/world/native/Owl/doc/INSTALL on
the CD, but unfortunately the installation procedure of Owl 1.1 assumes
prior experience with Linux.

So my advice is that you do one or both of the following:

1. Download the latest Owl-current ISO instead.  It's located under
current/iso/ on the mirrors listed at:

	http://www.openwall.com/Owl/DOWNLOAD.shtml

For the current version, the filename is Owl-current-20051208-i386.iso.gz

Then you would be able to use "settle".

2. Let us install the system and any application software for you
remotely.  You would only need to configure an IP address and a
temporary root password for the CD-booted system.  (Yes, this is a paid

(Continue reading)

Randy Greif | 14 Jan 2006 22:24

RE: Settle

Thanks
I thought I had the current
but it was the folder that was dated this month but the file was earlier
I will try the new one.

Randy

-----Original Message-----
From: Solar Designer [mailto:solar <at> openwall.com]
Sent: Saturday, January 14, 2006 2:41 PM
To: owl-users <at> lists.openwall.com
Subject: Re: [owl-users] Settle

Randy,

"settle" is currently only available in Owl-current, not in the older
1.1 release.  The installation instructions that you see on the website
start with this remark:

"The instructions below apply to Owl-current snapshots dated 2005/08/08
and newer (until revised).  For older versions of Owl (such as the 1.1
release), please refer to Owl/doc/INSTALL as included in the "native"
tree for your version (that's /usr/src/world/native/Owl/doc/INSTALL on
the CDs)."

So you would need to refer to /usr/src/world/native/Owl/doc/INSTALL on
the CD, but unfortunately the installation procedure of Owl 1.1 assumes
prior experience with Linux.

So my advice is that you do one or both of the following:

(Continue reading)

Solar Designer | 26 Jan 2006 00:33

Owl-current 2006/01/22 ISO; tcb 1.0; pam_mktemp 1.0.2; passwdqc for OpenBSD

Hi,

This is to announce several things at once:

1. There's a new Owl-current ISO-9660 image (dated 2006/01/22) available
for download under /pub/Owl/current/iso on the FTP mirrors:

	http://www.openwall.com/Owl/DOWNLOAD.shtml

Our new installer will now use the ncurses/CDK-based user interface with
colors by default on terminals which appear to be sufficiently capable.
There are command-line options to both "setup" and "settle" to disable
colors ("-b") or even force the dumb terminal interface ("-d").

Besides the installer, the following other packages have been
significantly updated since the last ISO snapshot (December 8, 2005):
man-pages (including the addition of POSIX man pages), Postfix, John the
Ripper, VIM, libnet, libnids, chkconfig, db4, gcc, man, hdparm,
diffstat, tcb, Linux-PAM, dialog, glibc, bash, Nmap, libutempter, and
strace.

Please refer to the change log for descriptions of these changes:

	http://www.openwall.com/Owl/CHANGES-current.shtml

This might be the last Owl-current snapshot to be made available before
the Owl 2.0 release.  Please test this extensively and provide your
feedback!

2. The tcb suite implementing our alternative password shadowing scheme

(Continue reading)

Group

gmane.linux.openwall.user.

Project Web Page

Openwall GNU/*/Linux Users Mailing List

Search Archive

Page

1 | 2

Articles in period: 10

January 2006

Language

Change language

Options

Current view: Threads only / Showing only 20 lines / Not hiding cited text.
Change to All messages, whole messages, or hide cited text.

Post a message
NNTP Newsgroup
Classic Gmane web interface
XML

XML

RSS Feed
List Information

About Gmane

Recent entries

Anyone has Owl image for Raspberry Pi? (13 May 2013)
software raid with device busy status (7 May 2013)
Owl encrypted / and tcplay (4 May 2013)
openvz kernel (4 May 2013)
Owl-current and 3.0-stable 2013/04/08 snapshot (11 Apr 2013)
Manage network interfaces (20 Feb 2013)
/etc/inittab exisits, yet reports none! (3 Jan 2013)
virtualization in openwall (3 Jan 2013)
Owl kickstart - Owl-current (VirtualBox Guest Additions) (18 Dec 2012)
Owl2 VirtualBox Guest additions (17 Dec 2012)
OWL development snapshots on an ALIX 2d2 board (15 Dec 2012)
Owl kickstart (15 Dec 2012)
python pre-packaged? (15 Nov 2012)
Owl-current 2012/08/18 snapshot (19 Aug 2012)
New kernel (8 Jun 2012)
Owl OpenVZ template - strange network configuration (4 Jun 2012)
making installation flash (29 May 2012)
Error in installworld (27 May 2012)
new Owl-current snapshot (9 May 2012)
screen termcap warning (5 Apr 2012)
Upgrading to current gives dependency problem after kernel upgrade and (3 Apr 2012)

Archives

16	May 2013
1	April 2013
3	February 2013
5	January 2013
19	December 2012
2	November 2012
1	August 2012
7	June 2012
8	May 2012
23	April 2012
12	March 2012
2	February 2012
2	January 2012
1	December 2011
22	November 2011
7	October 2011
8	September 2011
23	July 2011
1	June 2011
20	May 2011
8	April 2011
13	March 2011
7	February 2011
7	January 2011
16	December 2010
2	October 2010
8	September 2010
6	August 2010
6	July 2010
2	June 2010
1	May 2010
15	March 2010
5	January 2010
14	December 2009
3	November 2009
10	October 2009
15	September 2009
4	August 2009
5	July 2009
3	June 2009
7	April 2009
2	March 2009
3	February 2009
3	January 2009
1	August 2008
10	July 2008
1	May 2008
5	April 2008
9	March 2008
1	November 2007
1	October 2007
1	September 2007
6	August 2007
3	July 2007
36	June 2007
7	May 2007
26	April 2007
6	March 2007
16	February 2007
7	January 2007
1	December 2006
25	November 2006
7	October 2006
1	September 2006
11	August 2006
27	July 2006
11	June 2006
8	May 2006
11	April 2006
1	March 2006
27	February 2006
10	January 2006
14	December 2005
2	November 2005
17	October 2005
18	September 2005
1	July 2005
13	June 2005
19	May 2005
8	April 2005
8	March 2005
11	February 2005
15	January 2005
11	December 2004
29	November 2004
35	October 2004
11	September 2004
7	August 2004
4	July 2004
20	June 2004
9	May 2004
11	April 2004
14	March 2004
28	February 2004
8	January 2004
11	December 2003
8	November 2003
2	October 2003
9	September 2003
11	August 2003
9	June 2003
3	May 2003
12	April 2003
16	March 2003
11	February 2003
21	January 2003
13	December 2002
23	November 2002
46	October 2002
5	September 2002
7	August 2002
15	July 2002
12	June 2002
6	May 2002
2	April 2002
10	March 2002
3	February 2002
1	January 2002
2	December 2001
33	November 2001
44	October 2001
2	September 2001
6	August 2001
7	July 2001
10	May 2001

Design

Zawodny | Right Menu | Left Menu

Your Own Design

Paste the URL of your CSS below. Download CSS template