[asterisk-bugs] [Asterisk 0012163]: Asterisk segfaults when 'md5secret = userPassword' in res_ldap.conf

[noreply at bugs.digium.com]

A NOTE has been added to this issue. 
====================================================================== 
http://bugs.digium.com/view.php?id=12163 
====================================================================== 
Reported By:                gservat
Assigned To:                Corydon76
====================================================================== 
Project:                    Asterisk
Issue ID:                   12163
Category:                   Resources/res_config_ldap
Reproducibility:            always
Severity:                   crash
Priority:                   normal
Status:                     ready for testing
Asterisk Version:           1.6.0-beta4 
SVN Branch (only for SVN checkouts, not tarball releases): N/A 
SVN Revision (number only!):  
Disclaimer on File?:        N/A 
Request Review:              
====================================================================== 
Date Submitted:             03-06-2008 14:31 CST
Last Modified:              04-11-2008 16:56 CDT
====================================================================== 
Summary:                    Asterisk segfaults when 'md5secret = userPassword'
in res_ldap.conf
Description: 
Hi,

I had res_config_ldap working relatively well when I decided to change
md5secret to point at 'userPassword'. Reason for this is that I prefer to
manage one password attribute for each user, and not 2. Now, when I try and
connect from a SIP client, Asterisk segfaults (every time). If I change
md5secret back to AstAccountRealmedPassword, it starts working again
(sometimes it allows me to login with any password, other times it requires
the right password .. but that's another issue altogether)

I've attached the backtrace from gdb. Unfortunately my C is not good
enough (nor  my knowledge of the Asterisk internals) to troubleshoot this
one. I will happily test if someone finds the problem and attaches a
patch.

Thanks in advance!
====================================================================== 

---------------------------------------------------------------------- 
 gservat - 04-11-08 16:56  
---------------------------------------------------------------------- 
Hi,

Thanks for the patch. At least Asterisk doesn't crash now, but it's
allowing me to authenticate with *any* password. I commented out 'secret =
AstAccountSecret' and uncommented 'md5secret = userPassword', restart
Asterisk, tried to register and got in with any password (tried with any
random characters). This happened with both; SIP and IAX. I also tried
setting 'auth=md5' in iax.conf but it didn't help.

Any thoughts? 

Issue History 
Date Modified   Username       Field                    Change               
====================================================================== 
04-11-08 16:56  gservat        Note Added: 0085386                          
======================================================================