Debian Bug report logs - #9356
AUTHINFO GENERIC support

Reply or subscribe to this bug.

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: sysadmin@chiark.greenend.org.uk (Ian Jackson)

To: Debian bugs submission address <submit@bugs.debian.org>

Subject: nn does not support XAUTHINFO GENERIC

Date: Sun, 4 May 97 21:11 BST

Package: nn
Version: 6.5.0.b3.linux.1.1-01

I have an access-controlled nntp server which uses an XAUTHINFO
GENERIC method to control access.

One of my users tried to use nn with it, but was unable to access all
of the groups I carry because nn didn't authenticate him.

At least, this is what I think the problem is.  The observed symptoms
are that nn complains "Reading chiark.system: 3061 articles...no
overview data for group `chiark.system'".  Part of an strace log, a
log of an NNTP session with authentication, and the output of `env'
for my test user, are below.

If nn has an easy option for XAUTHINFO GENERIC then it should be
enabled.  If not then it would be nice if one could be provided.

In any case nn should be much better at reporting what actually went
wrong.

Oh, and I see from the strace output that nn is trying to open a
spurious logfile in /usr/lib !

Ian.

write(1, "\33[23;1H\r\33[7mNumber of artic"..., 50) = 50
write(1, "\33[24;1HUse: j)ump u)nread a)ll"..., 73) = 73
write(1, "\33[23;33H", 8)               = 8
read(0, "a", 10)                        = 1
write(1, "\33[H\33[2JReading chiark.system"..., 46) = 46
write(5, "GROUP chiark.system\r\n", 21) = 21
read(4, "480 identify yourself !  friend "..., 1024) = 42
open("/usr/lib/nn/Log", O_WRONLY|O_APPEND|O_CREAT, 0666) = -1 EACCES (Permission
 denied)
write(1, "no overview data for group `chia"..., 43) = 43
write(1, "\33[24;1HNo selections made.", 26) = 26

200 ewrotcd InterNetNews server INN 1.5.1 17-Dec-1996 ready
mode reader
200 news.chiark.greenend.org.uk nntp-merge ready (posting might be ok).
group chiark.system
480 identify yourself !  friend or foe ?
xauthinfo generic md5cookie1way ian
100 22:eb:6c:33:9a:3b:0e:00:7f:00:00:01:06:a7:b6:52
MD5 0b:34:7d:96:ba:77:b8:aa:92:fa:9e:ef:37:b7:f1:70
281 ok posters+ censor+ camlbg+ uksmbi+ debian+ nyxers+ uvv+ fhs+ xwar+ debianboard+
group chiark.system
211 300 2762 3061 chiark.system

$ env
NNTPAUTH=md5cookie1way chiark
LOGNAME=testac
MAIL=/var/spool/mail/testac
TERM=xterm
HOSTTYPE=i386
PATH=/usr/local/bin:/usr/bin:/bin:/usr/bin/X11:/usr/games:.
HOME=/u/testac
SHELL=/bin/bash
PS1=\$ 
USER=testac
OSTYPE=Linux
NNTPSERVER=localhost
SHLVL=1
_=/usr/bin/env
$ 

Message #8 received at 9356-forwarded@bugs.debian.org (full text, mbox, reply):

From: Martin Schulze <joey@finlandia.Infodrom.North.DE>

To: Michael T Pins <mtpins@isca.uiowa.edu>

Cc: 9356-forwarded@bugs.debian.org

Subject: nn does not support XAUTHINFO GENERIC

Date: Sun, 1 Nov 1998 02:24:26 +0100

Hi Michael,

your address was the most recent I was able to find in the nn
distribution.  I have receved the following bug report from
one user of Debian GNU/Linux - who is nowadays its project
leader.

Ian Jackson wrote:
> I have an access-controlled nntp server which uses an XAUTHINFO
> GENERIC method to control access.
> 
> One of my users tried to use nn with it, but was unable to access all
> of the groups I carry because nn didn't authenticate him.
> 
> At least, this is what I think the problem is.  The observed symptoms
> are that nn complains "Reading chiark.system: 3061 articles...no
> overview data for group `chiark.system'".  Part of an strace log, a
> log of an NNTP session with authentication, and the output of `env'
> for my test user, are below.
> 
> If nn has an easy option for XAUTHINFO GENERIC then it should be
> enabled.  If not then it would be nice if one could be provided.

The keyword "XAUTHINFO" does not occur in the source distribution.
Michael, would this be an issue for new development of nn?

> In any case nn should be much better at reporting what actually went
> wrong.
> 
> Oh, and I see from the strace output that nn is trying to open a
> spurious logfile in /usr/lib !

Please find the entire report at
http://www.infodrom.north.de/Debian/Bugs/db/93/9356.html

Regards,

	Joey
 
-- 
There are lies, statistics and benchmarks.

Message #13 received at 9356-close@bugs.debian.org (full text, mbox, reply):

From: Cord Beermann <cord@debian.org>

To: 9356-close@bugs.debian.org

Subject: Bug#9356: fixed in nn 6.6.0-1

Date: Sun, 30 Sep 2001 15:05:45 -0400

We believe that the bug you reported is fixed in the latest version of
nn, which has been installed in the Debian FTP archive:

nn_6.6.0-1.dsc
  to pool/main/n/nn/nn_6.6.0-1.dsc
nn_6.6.0.orig.tar.gz
  to pool/main/n/nn/nn_6.6.0.orig.tar.gz
nn_6.6.0-1.diff.gz
  to pool/main/n/nn/nn_6.6.0-1.diff.gz
nn_6.6.0-1_i386.deb
  to pool/main/n/nn/nn_6.6.0-1_i386.deb



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 9356@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Cord Beermann <cord@debian.org> (supplier of updated nn package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@debian.org)


-----BEGIN PGP SIGNED MESSAGE-----

Format: 1.7
Date: Sat, 22 Sep 2001 21:11:46 +0200
Source: nn
Binary: nn
Architecture: source i386
Version: 6.6.0-1
Distribution: unstable
Urgency: low
Maintainer: Cord Beermann <cord@debian.org>
Changed-By: Cord Beermann <cord@debian.org>
Description: 
 nn         - Heavy-duty USENET news reader (curses-based client)
Closes: 9356 54333 83442 83855 84409 90457 92105 97074 104956 105759
Changes: 
 nn (6.6.0-1) unstable; urgency=low
 .
   * New Maintainer.
   * Package rebuilt from scratch.
   * New upstream release. changes include:
     - support for NNTP AUTH. Can't find information XAUTHINFO GENERIC.
       (closes: #9356)
     - 'mailed to the moderator' added to aux-script. (closes: #54333)
   * added RfC1522-patch by Kristian Koehntopp and Stefan Roerich
   * added a patch by Daniel Merritt <merritt@highlander.cbnet.ns.ca> which
     prevents nn from crashing if NNTPSERVER contains an unresolveable name.
     (closes: #97074)
   * disabled NOV, it causes different problems. People should read per NNTP or
     have to recompile to read directly on spool. (closes: #84409, #105759)
   * NMU fixes finally closed. (closes: #83855, #90457, #92105)
   * guessed that the Bugreport from hppa-autobuilder could be this: fixed
     build problem with gcc-3.x (fix found in news.software.nn by Neil W
     Rickert <rickert+nn@cs.niu.edu>) (closes: #104956)
     Please make sure that new Bugreports are more meaningful!
   * Bug has disappeared (closes: #83442)
Files: 
 377e5d56e0fca44457f52ac8fb6a41d5 595 news optional nn_6.6.0-1.dsc
 e8398355722a81540556e3372abb0a32 588572 news optional nn_6.6.0.orig.tar.gz
 2b9da2565bc53bbe7d43f22046d747f8 38859 news optional nn_6.6.0-1.diff.gz
 450fdf1aabab1844ec95066c942200ef 329616 news optional nn_6.6.0-1_i386.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQE7tv/A72U+jVr0xGIRAYu8AJ0VSUElxc0zdotkENrK0inVnapIJQCdHT0J
TSFXvEh78qP684ScGyv5iF4=
=2+yf
-----END PGP SIGNATURE-----

Message #18 received at 9356@bugs.debian.org (full text, mbox, reply):

From: sysadmin@chiark.greenend.org.uk (Ian Jackson)

To: 9356@bugs.debian.org

Subject: Re: Bug#9356 acknowledged by developer (Bug#9356: fixed in nn 6.6.0-1)

Date: Mon, 1 Oct 2001 10:48:55 +0100 (BST)

reopen 9356
thanks

Debian Bug Tracking System writes ("Bug#9356 acknowledged by developer          (Bug#9356: fixed in nn 6.6.0-1)"):
> This is an automatic notification regarding your Bug report
...
>      - support for NNTP AUTH. Can't find information XAUTHINFO GENERIC.
>        (closes: #9356)

There isn't much sign here that you've actually addressed the issues
in my report:

* There is definitely a bug here, because NN failed to report
appropriately the problem it was having (permission denied error codes
from the NNTP server).

* It attempted to open /usr/lib/nn/Log.  Why ?

* If you do not know what AUTHINFO GENERIC is, please do not close my
report.  I can supply more details and possibly even a patch, if you
are likely to apply it.

Thanks,
Ian.

Message #23 received at 9356@bugs.debian.org (full text, mbox, reply):

From: Cord Beermann <cord@debian.org>

To: Ian Jackson <sysadmin@chiark.greenend.org.uk>

Cc: 9356@bugs.debian.org

Subject: Re: Bug#9356: acknowledged by developer (Bug#9356: fixed in nn 6.6.0-1)

Date: Mon, 1 Oct 2001 13:37:08 +0200

[Message part 1 (text/plain, inline)]

Hallo! Du (Ian Jackson) hast geschrieben:

>>      - support for NNTP AUTH. Can't find information XAUTHINFO GENERIC.
>>        (closes: #9356)
>
>There isn't much sign here that you've actually addressed the issues
>in my report:
>
>* There is definitely a bug here, because NN failed to report
>appropriately the problem it was having (permission denied error codes
>from the NNTP server).

Yes. Ack. 

>* It attempted to open /usr/lib/nn/Log.  Why ?

it currently tries /var/log/nn (which even don't work.) I'm looking into
it.

>* If you do not know what AUTHINFO GENERIC is, please do not close my
>report.  I can supply more details and possibly even a patch, if you
>are likely to apply it.

I know what 'AUTHINFO GENERIC' is, but you reported XAUTHINFO. That is
what i've searched for. (Google finds only one reference on it
dated '94)

My fault... looking into your bugreport again, i must admit that i
should had do that before closing the bug.

The fact is: AUTHINFO GENERIC is not yet supported. I don't expect
that it will in nn V6, maybe in V7 (if that ever is finished.).
'Original AUTHINFO' is now, with the recent release, supported.

So i'll notify the upstream author (again) about this and move this
bug report down to wishlist, if the other points are solved.

If you want to provide a patch i'll gladly send it upstream and
include it in the Package.

Cord
-- 
Cord Beermann   cord@Wunder-Nett.org (Privat)

[Message part 2 (application/pgp-signature, inline)]

Message #28 received at 9356@bugs.debian.org (full text, mbox, reply):

From: sysadmin@chiark.greenend.org.uk (Ian Jackson)

To: Cord Beermann <cord@debian.org>

Cc: 9356@bugs.debian.org

Subject: Re: Bug#9356: acknowledged by developer (Bug#9356: fixed in nn 6.6.0-1)

Date: Mon, 1 Oct 2001 12:40:10 +0100 (BST)

Cord Beermann writes ("Re: Bug#9356: acknowledged by developer          (Bug#9356: fixed in nn 6.6.0-1)"):
> Hallo! Du (Ian Jackson) hast geschrieben:
> >* There is definitely a bug here, because NN failed to report
> >appropriately the problem it was having (permission denied error codes
> >from the NNTP server).
> 
> Yes. Ack. 

Thanks.

> >* It attempted to open /usr/lib/nn/Log.  Why ?
> 
> it currently tries /var/log/nn (which even don't work.) I'm looking into
> it.

I wonder what it would write to it if it succeeded ?  It's a bit
creepy really ...

> I know what 'AUTHINFO GENERIC' is, but you reported XAUTHINFO. That is
> what i've searched for. (Google finds only one reference on it
> dated '94)
> 
> My fault... looking into your bugreport again, i must admit that i
> should had do that before closing the bug.

Ah, right.

> The fact is: AUTHINFO GENERIC is not yet supported. I don't expect
> that it will in nn V6, maybe in V7 (if that ever is finished.).
> 'Original AUTHINFO' is now, with the recent release, supported.

I see.

> So i'll notify the upstream author (again) about this and move this
> bug report down to wishlist, if the other points are solved.

That's fine, thanks.

> If you want to provide a patch i'll gladly send it upstream and
> include it in the Package.

I (or one of my users) may well do this.

Ian.

Message #29 received at 9356-forwarded@bugs.debian.org (full text, mbox, reply):

From: Cord Beermann <cord@debian.org>

To: Michael T Pins <mtpins@nndev.org>

Cc: 9356-forwarded@bugs.debian.org

Subject: nn 6.6.0-1: Problem with Authentication.

Date: Mon, 1 Oct 2001 18:31:10 +0200

[Message part 1 (text/plain, inline)]

Hi.

This is a very old bug from Debian, you were notified about it in the
past...

You can look the complete Bugreport at http://bugs.debian.org/9356

The problem present are these:

1. nn doesn't properly display why it fails.

  Example: NNTPSERVER=news.nexgo.de nn

  It ask for authorization, i give a wrong one, and get 

  Lost connection to NNTP server news.nexgo.de: Success

2. The Global Logfile. I had to run it with rights set to 0666 which
   isn't a good thing on a multi-user machine. I changed that so that
   it now logs in $HOME/.nn/Log
   (btw: i've disabled Spool/NNMaster-Reading, only NNTP works)

3. This is a Wishlist-Item: Support for AUTHINFO GENERIC and AUTHINFO SIMPLE

Cord
-- 
Cord Beermann   cord@Wunder-Nett.org (Privat)

Auch wenn Du nicht paranoid bist, bedeutet das nicht das sie nicht hinter Dir
her sind.  -- unbekannt.

[Message part 2 (application/pgp-signature, inline)]

Message #38 received at 9356@bugs.debian.org (full text, mbox, reply):

From: Cord Beermann <cord@debian.org>

To: Ian Jackson <sysadmin@chiark.greenend.org.uk>

Cc: 9356@bugs.debian.org

Subject: Re: Bug#9356: acknowledged by developer (Bug#9356: fixed in nn 6.6.0-1)

Date: Wed, 3 Oct 2001 18:18:10 +0200

[Message part 1 (text/plain, inline)]

Hallo! Du (Ian Jackson) hast geschrieben:

>> >* It attempted to open /usr/lib/nn/Log.  Why ?
>> 
>> it currently tries /var/log/nn (which even don't work.) I'm looking into
>> it.
>
>I wonder what it would write to it if it succeeded ?  It's a bit
>creepy really ...

:-)

it tries to write something like this:

N: Oct  1 15:47 (cord): NNTP Authentication
N: Oct  1 15:47 (cord): `LIST' response: 480

in the just uploaded nn-6.6.0-3-Package, that Logfile is in
$HOME/.nn/Log for now.

Cord

-- 
Cord Beermann   cord@Wunder-Nett.org (Privat)
I hear that if you play the NT 4.0 CD backwards, you get a satanic message
That's nothing. If you play it forward, it installs NT 4.0!
	-- rec.humor.funny

[Message part 2 (application/pgp-signature, inline)]

Message #43 received at 9356@bugs.debian.org (full text, mbox, reply):

From: Cord Beermann <cord@debian.org>

To: Ian Jackson <sysadmin@chiark.greenend.org.uk>

Cc: 9356@bugs.debian.org

Subject: Bug#9356: nn should display error codes

Date: Sat, 24 Nov 2001 22:07:13 +0100

[Message part 1 (text/plain, inline)]

Hi.

The current version of nn 6.6.2-3 now displays errors on STDOUT/ERR
when authorization fails.

Please test it and if the solution is ok for you, let me know.

thanks,
	Cord

[Message part 2 (application/pgp-signature, inline)]

Message #48 received at 9356-close@bugs.debian.org (full text, mbox, reply):

From: Cord Beermann <cord@debian.org>

To: 9356-close@bugs.debian.org

Subject: Bug#9356: fixed in nn 6.6.5-1

Date: Mon, 10 Feb 2003 13:47:17 -0500

We believe that the bug you reported is fixed in the latest version of
nn, which is due to be installed in the Debian FTP archive:

nn_6.6.5-1.diff.gz
  to pool/main/n/nn/nn_6.6.5-1.diff.gz
nn_6.6.5-1.dsc
  to pool/main/n/nn/nn_6.6.5-1.dsc
nn_6.6.5-1_i386.deb
  to pool/main/n/nn/nn_6.6.5-1_i386.deb
nn_6.6.5.orig.tar.gz
  to pool/main/n/nn/nn_6.6.5.orig.tar.gz



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 9356@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Cord Beermann <cord@debian.org> (supplier of updated nn package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.7
Date: Mon, 10 Feb 2003 16:05:00 +0100
Source: nn
Binary: nn
Architecture: source i386
Version: 6.6.5-1
Distribution: unstable
Urgency: low
Maintainer: Cord Beermann <cord@debian.org>
Changed-By: Cord Beermann <cord@debian.org>
Description: 
 nn         - Heavy-duty USENET news reader (curses-based client)
Closes: 9356 174796
Changes: 
 nn (6.6.5-1) unstable; urgency=low
 .
   * New upstream release
     - nnview no longer tries to connect to the NNTPSERVER
     - DOMAIN can now be defined even if HIDDENNET isn't
     - nn no longer segfaults if it reconnects during initial authentication
   * added danish debconf-template (closes: #174796)
   * closing old bug. Reporter didn't respond to question if his problem is
     fixed. I think the problem (displaying errorcodes) is. (closes: #9356)
Files: 
 645a5ba78b906711e8f18a81dc557d28 564 news optional nn_6.6.5-1.dsc
 bce62160d97f15228906d3a9f1299fa9 582196 news optional nn_6.6.5.orig.tar.gz
 26d5a9a6dea1699d880fb28e946676d6 36848 news optional nn_6.6.5-1.diff.gz
 0bb20c6c758b5ce9c1663c2c70df5019 343350 news optional nn_6.6.5-1_i386.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.0 (GNU/Linux)

iD8DBQE+R/DG72U+jVr0xGIRAnAlAJ0TvxhQS4Rngz6EqTBnnZgO+185HACcDMmo
feVyPicNPnnLxLp0vCn7ngc=
=NWl3
-----END PGP SIGNATURE-----

Message #55 received at 9356@bugs.debian.org (full text, mbox, reply):

From: sysadmin@chiark.greenend.org.uk (Ian Jackson)

To: 9356@bugs.debian.org

Subject: Re: Bug#9356: nn should display error codes

Date: Wed, 12 Feb 2003 13:39:28 +0000 (GMT)

Cord Beermann writes ("Bug#9356: nn should display error codes"):
> The current version of nn 6.6.2-3 now displays errors on STDOUT/ERR
> when authorization fails.
> 
> Please test it and if the solution is ok for you, let me know.

Sorry for not getting back to you until prompted by your closing of
the bug report.

The new version of nn does seem to behave differently.  (I'm trying
6.6.5-1 atm.)  It gets the 480 response from my server and prompts for
a username.  This is reasonable behaviour given the lack of AUTHINFO
GENERIC (although not what I desire).  However, I can't then quit it -
^C, ^Z etc. are all disabled and even a SIGTERM didn't help.

Also, this bug report is partially a wishlist bug about the AUTHINFO
GENERIC support.

What I propose to do, then, if you agree, is to file a new report
regarding the inability to get out of the authentication prompts (with
strace output, etc.), and to relegate this bug (9356) to a wishlist
bug about AUTHINFO GENERIC.

Would that be acceptable to you ?

Thanks,
Ian.

Message #60 received at 9356@bugs.debian.org (full text, mbox, reply):

From: Cord Beermann <cord@debian.org>

To: Ian Jackson <sysadmin@chiark.greenend.org.uk>, 9356@bugs.debian.org

Subject: Re: Bug#9356: nn should display error codes

Date: Wed, 12 Feb 2003 21:45:03 +0100

Hallo! Du (Ian Jackson) hast geschrieben:
>
>The new version of nn does seem to behave differently.  (I'm trying
>6.6.5-1 atm.)  It gets the 480 response from my server and prompts for
>a username.  This is reasonable behaviour given the lack of AUTHINFO
>GENERIC (although not what I desire).  However, I can't then quit it -
>^C, ^Z etc. are all disabled and even a SIGTERM didn't help.
>
>Also, this bug report is partially a wishlist bug about the AUTHINFO
>GENERIC support.

>What I propose to do, then, if you agree, is to file a new report
>regarding the inability to get out of the authentication prompts (with
>strace output, etc.), and to relegate this bug (9356) to a wishlist
>bug about AUTHINFO GENERIC.

>Would that be acceptable to you ?

it is. the quit-problem is already reported as bug#140802

Cord

-- 
Cord Beermann   cord@Wunder-Nett.org (Privat)
Fachbegriffe der Informatik 160: "Webdesign": Irgendeinem nichtsahnenden Kunden
Unsummen für die Gestaltung seiner Internetpräsenz (siehe dort) abzuknöpfen.
(Martin Schmitt)

Send a report that this bug log contains spam.