MySQL 3.23.29 problem

[Matthew P. Barnson]

OK, got verification from one of the MySQL engineers that, indeed, 3.23.29
had a problem detecting libcrypt in the configure script. This would cause
the cryptpasswd field in the "profiles" table for Bugzilla to always contain
"null". You can verify your version of MySQL is not vulnerable to this
problem by issuing this command at the MySQL prompt:

mysql> select ENCRYPT("hello");

which should return:

+------------------+
| ENCRYPT("hello") |

+------------------+
| s3/reLWGfW.aM |

+------------------+
1 row in set (0.00 sec)

Anyway, it's a dead issue now that 3.23.30 gamma has hit the street, where
they fixed that problem.

---------- Forwarded Message ----------
Subject: Re: MySQL 3.23 install
Date: Tue, 16 Jan 2001 13:09:28 -0700
From: Sasha Pachev <sa...@mysql.com>
To: plug...@plug.org,
"Matthew P. Barnson" <bar...@imall.com>

On Tuesday 16 January 2001 12:30, Matthew P. Barnson wrote:
>Has anyone else run into trouble with MySQL's crypt function in the latest
>versions? (3.23.29 and 3.23.30)
>On netscape.public.mozilla.webtools I've had to recommend against installing
>MySQL 3.23.29 and 3.23.30 for Bugzilla across the board because crypt()
>doesn't seem to work at all with it.
>The problem doesn't cause Bugzilla to bomb-- it just causes the

cryptpassword

>field (a varchar 64-byte field) to show NULL when inserted (it uses mysql
>crypt()). There's a library called CGI.pl shared by most bugzilla apps that
>has a common $mycryptpasswd function that handles this transaction, but all
>logins bomb after initial user creation because it just can't fetch any

value

>from this table.
>
>We've confirmed it works fine in all 3.22 tested versions, and 3.23 earlier
>than 3.23.29 (confirmed working on 3.23.28) Please see thread in
>news://news.mozilla.org/netscape/public/mozilla/webtools called "MYSQL
>UPGRADE BROKE PASSWORDS" for more details.
>
>Any help is appreciated it -- this is about to become a FAQ entry for
>Bugzilla because of all the problems we've had with it. It would suck if we
>had to rewrite how we handle crypt due to a code change...

The problem was a bug in configure that failed to detect libcrypt and
compiled 3.23.29 without crypt support, which caused ENCRYPT() to always
return NULL. Fixed in 3.23.30.

--
MySQL Development Team
__ ___ ___ ____ __
/ |/ /_ __/ __/ __ \/ / Sasha Pachev <sa...@mysql.com>
/ /|_/ / // /\ \/ /_/ / /__ MySQL AB, http://www.mysql.com/
/_/ /_/\_, /___/\___\_\___/ Provo, Utah, USA
<___/

-------------------------------------------------------

--
Matthew P. Barnson
Manager, Systems Administration
Excite@Home

"There is an inn, a merry old inn, beneath an old grey hill
And there they brewed the beer so brown
The Man in the Moon himself came down
Came down to drink his fill."
--"Frodo", "The Lord of the Rings"