Package: kdebase
Version: 1.1.2

The kcheckpass program does not authenticate nisplus users
when setuid on Solaris:

kcheckpass compiled with:
-DHAVE_CONFIG_H -DHAVE_SHADOW -DHAVE_VSYSLOG
or just -DHAVE_CONFIG_H
or -DHAVE_CONFIG -DHAVE_SHADOW

This shows the error:
ls -l /usr/local/kde/bin/kcheckpass
---s--x--x   1 root     sys        10720 Sep 29 16:59
/usr/local/kde/bin/kcheckpass
 /usr/local/kde/bin/kcheckpass
Password:
authentication failure for user rhron [uid 18008]

I can run other setuid programs (like sudo) in /usr/local/bin with no
problem.

kcheckpass without setuid works:
ls -l ./kcheckpass
-rwxr-xr-x   1 root     sysadmin   10720 Sep 29 17:22 ./kcheckpass
Password:
gg33301s:/sw/source/XWindows/kde/kdebase-1.1.2/kcheckpass$ echo $?
0

Local accounts (in /etc/passwd) work fine when kcheckpass is setuid.
kcheckpass doesn't work with local accounts unless it is setuid.


--
Randall W. Hron
Systems Analyst
mailto:x2hron@southernco.com
Linux - because it's all about freedom