Re: [BUGS] Possible password authentication bug in 6.3.1 (fwd)

Does this make sense to anyone familiar with that area of the code.

Forwarded message:

From fcarello@srd.it Sat Apr 4 08:59:43 1998
Message-Id: <199804041303.PAA09515@shadow.srd.it>
Comments: Authenticated sender is <fcarello@mail.srd.it>
From: "Fernando Carello" <fcarello@srd.it>
To: Bruce Momjian <maillist@candle.pha.pa.us>
Date: Sat, 4 Apr 1998 16:08:35 +0000
MIME-Version: 1.0
Content-type: text/plain; charset=US-ASCII
Content-transfer-encoding: 7BIT
Subject: Re: [BUGS] Possible password authentication bug in 6.3.1
Priority: normal
In-reply-to: <199804032005.PAA16568@candle.pha.pa.us>
References: <199804031722.TAA06756@shadow.srd.it> from "fcarello@srd.it" at Apr 3, 98 08:16:40 pm
X-mailer: Pegasus Mail for Win32 (v2.54)

Try adding another host line to the end of the file, and let me know if
that fixes it.

Added:

host users 192.168.0.1 255.255.255.255 password

at the end of pg_hba.conf, but the error is still there.

Please note that I don't make use of Unix sockets for the connection,
I use TCP/IP instead (" -i ").

I've also commented out the (original) last two lines that allowed
restrictless connections from the localhost.

I'm not very familiar with Postgres internals, but it *seems* to me
that the variable "areq" is not getting the right value: it should be
"3" ( = AUTH_REQ_PASSWORD) for plain-password authentication, while
it gets "13824".
----
Now I'm at home, and I'm playing a little with libpq sources: here
I've got Postgres 6.3 (not 6.3.1) and I get a value of areq = 14336
(and the same error, of course).
So I printed out areq value in "fe-connect.c", just after the
pqGetInt call: I get areq = "14336d", that is quite strange; of
course, shortly after, the call to fe_sendauth fails.
Then I tried to force areq=3 just before calling fe_sendauth (we are
near the middle of fe-connect.c), and it happens that the error
becomes:

FATAL 1: Socket command option.

Don't know if that helps in some way ! :-)

Please let me know if I can do something useful (btw, I'm in trouble
with that authentication stuff: for now I'm not able to protect my
data, so I shutted down the SQL server), and as always thanks to all
you people.

Fernando Carello

-- 
Bruce Momjian                          |  830 Blythe Avenue
maillist@candle.pha.pa.us              |  Drexel Hill, Pennsylvania 19026
  +  If your life is a hard drive,     |  (610) 353-9879(w)
  +  Christ can be your backup.        |  (610) 853-3000(h)