Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 04 Dec 2017 22:52:03 +0000
From:      bugzilla-noreply@freebsd.org
To:        freebsd-ports-bugs@FreeBSD.org
Subject:   [Bug 224098] security/pam_google_authenticator: Google Authenticator no longer displays QR codes
Message-ID:  <bug-224098-13@https.bugs.freebsd.org/bugzilla/>

next in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D224098

            Bug ID: 224098
           Summary: security/pam_google_authenticator: Google
                    Authenticator no longer displays QR codes
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Some People
          Priority: ---
         Component: Individual Port(s)
          Assignee: freebsd-ports-bugs@FreeBSD.org
          Reporter: freebsdbugs@zofrex.com
                CC: jnlin@freebsd.cs.nctu.edu.tw
             Flags: maintainer-feedback?(jnlin@freebsd.cs.nctu.edu.tw)
                CC: jnlin@freebsd.cs.nctu.edu.tw

Overview:

The Google Authenticator command-line utility no longer displays QR codes w=
hen
generating new secrets.

Steps to reproduce:

Install both "libqrencode" and "pam_google_authenticator". Run
"google-authenticator" and answer the questions until it tells you your sec=
ret.

Expected:

To see a QR code displayed on the terminal.

Actual:

The secret is printed in text but no QR code is displayed.

Versions:

Tested on FreeBSD 10.3 and 11.1 using both ports and pkg-ng. I first
encountered this yesterday. The last time I'm reasonably confident this wor=
ked
was April this year.

Other notes:

Looking in my /usr/local/lib I see:

libqrencode.so
libqrencode.so.4
libqrencode.so.4.0.0

But looking at the source code for google-authenticator [1] (at the revision
specified in the Makefile, 195ddc1) I only see attempts to load:

libqrencode.so.2
libqrencode.so.3
libqrencode.dylib.3

So it looks like libqrencode has gotten ahead of what google-authenticator
expects. Looking at the latest version of google-authenticator [2] I see it
also loads .so.4, so I think this issue may be resolved to updating to the
latest version... but I have not tested if that works.

[1]:
https://github.com/google/google-authenticator/blob/195ddc135f8360254c459d0=
37083ff46054df94f/libpam/google-authenticator.c#L206

[2]:
https://github.com/google/google-authenticator-libpam/blob/7365ed10d54393fb=
4c100cac063ae8edb744eac6/src/google-authenticator.c#L206
(at the time of writing)

--=20
You are receiving this mail because:
You are the assignee for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-224098-13>