Anonymous | Login | 2024-11-22 23:35 EST |
Main | My View | View Issues | Change Log | Roadmap |
View Issue Details [ Jump to Notes ] | [ Issue History ] [ Print ] | |||||||
ID | Project | Category | View Status | Date Submitted | Last Update | |||
0001370 | PacketFence | hardware modules | public | 2012-01-24 15:31 | 2012-02-28 14:31 | |||
Reporter | obilodeau | |||||||
Assigned To | obilodeau | |||||||
Priority | normal | Severity | minor | Reproducibility | have not tried | |||
Status | closed | Resolution | fixed | |||||
Platform | OS | OS Version | ||||||
Product Version | ||||||||
Target Version | 3.2.0 | Fixed in Version | 3.2.0 | |||||
Summary | 0001370: Net::Appliance::Session privilege detection broken resulting into a thread crash | |||||||
Description | In setPortSecurityMaxSecureMacAddrVlanAccessByIfIndex (from lib/pf/SNMP/Cisco/Catalyst_2950.pm) the privilege detection doesn't work when a user gets in with an already privileged user (level 15).thread failed to start: Failed to get first privileged prompt at /usr/local/pf/lib/pf/SNMP/Cisco/Catalyst_2950.pm line 678 (0000001) (W threads)(S) The entry point function of threads->create() failed for some reason. | |||||||
Tags | No tags attached. | |||||||
fixed in git revision | ||||||||
fixed in mtn revision | 5b3395f89f9fff65ed9bdd165e11a4688f599d73 | |||||||
Attached Files | net-appliance-session-disable-begin-privilege-fix-1370.patch [^] (8,111 bytes) 2012-01-25 14:46 [Show Content] | |||||||
Relationships | ||||||
|
Notes | |
(0002547) obilodeau (reporter) 2012-01-25 12:29 |
in_privileged_mode() doesn't do a verification on the remote end. It simply reflects the state of what was done with the module so far. See http://search.cpan.org/~oliver/Net-Appliance-Session-1.36/lib/Net/Appliance/Session/Cookbook/Recipe05.pod [^] I filed an upstream ticket: https://github.com/ollyg/Net-Appliance-Session/issues/13 [^] For now, I'll disable all privileged mode escalation in the code and document that until I hear from what the Net::Appliance guys think about my issue. Anyway, if they fix it upstream and release i'll still have to get the new version packaged up because rpmforge is stuck at 1.36 and there's an API breakage between 1.36 and later. |
(0002548) obilodeau (reporter) 2012-01-25 14:47 |
workaround to disable all begin_privilege calls patch attached. |
(0002549) obilodeau (reporter) 2012-01-25 14:48 |
All except Trapeze since by default users get in unprivileged. |
(0002551) obilodeau (reporter) 2012-01-25 15:18 |
disabled privilege detection in all but trapeze. Once I get upstream's opinion on the issue we'll see what we'll do. commit contains changes to docs, upgrade, etc. which the attached patch doesn't have. |
(0002553) obilodeau (reporter) 2012-01-26 14:29 |
oops, yesterday's fix introduced a problem. here's the blurb to fix it:--- pf/lib/pf/SNMP/Cisco/WLC_2106.pm 7547d8900dbfc841f270d05056f46f3fecb65b88 +++ pf/lib/pf/SNMP/Cisco/WLC_2106.pm 87810d1392683519de0550517bff2af107cbbb36 @@ -86,7 +86,7 @@ sub deauthenticateMac { ); # Session not already privileged are not supported at this point. See 0001370 #$session->begin_privileged( $this->{_cliEnablePwd} ); - $session->->do_privileged_mode(0); + $session->do_privileged_mode(0); $session->begin_configure(); }; |
(0002584) obilodeau (reporter) 2012-02-28 14:31 |
Fixed in recently released 3.2.0. |
Issue History | |||
Date Modified | Username | Field | Change |
2012-01-24 15:31 | obilodeau | New Issue | |
2012-01-24 15:31 | obilodeau | Status | new => assigned |
2012-01-24 15:31 | obilodeau | Assigned To | => obilodeau |
2012-01-24 15:32 | obilodeau | Relationship added | related to 0000900 |
2012-01-24 15:33 | obilodeau | Description Updated | |
2012-01-25 12:29 | obilodeau | Note Added: 0002547 | |
2012-01-25 14:46 | obilodeau | File Added: net-appliance-session-disable-begin-privilege-fix-1370.patch | |
2012-01-25 14:47 | obilodeau | Note Added: 0002548 | |
2012-01-25 14:48 | obilodeau | Note Added: 0002549 | |
2012-01-25 15:18 | obilodeau | mtn revision | => 5b3395f89f9fff65ed9bdd165e11a4688f599d73 |
2012-01-25 15:18 | obilodeau | Note Added: 0002551 | |
2012-01-25 15:18 | obilodeau | Status | assigned => resolved |
2012-01-25 15:18 | obilodeau | Fixed in Version | => trunk |
2012-01-25 15:18 | obilodeau | Resolution | open => fixed |
2012-01-26 14:29 | obilodeau | Note Added: 0002553 | |
2012-02-28 14:22 | obilodeau | Target Version | +1 => 3.2.0 |
2012-02-28 14:22 | obilodeau | Fixed in Version | trunk => 3.2.0 |
2012-02-28 14:31 | obilodeau | Note Added: 0002584 | |
2012-02-28 14:31 | obilodeau | Status | resolved => closed |
Copyright © 2000 - 2012 MantisBT Group |