From owner-freebsd-isp Fri Oct 12 11:52:44 2001 Delivered-To: freebsd-isp@freebsd.org Received: from gifw.genroco.com (genroco.com [205.254.195.202]) by hub.freebsd.org (Postfix) with ESMTP id 8445337B408 for ; Fri, 12 Oct 2001 11:52:36 -0700 (PDT) Received: from gi2.genroco.com (IDENT:root@gi2.genroco.com [192.133.120.3]) by gifw.genroco.com (8.9.3/8.9.3) with ESMTP id NAA23854; Fri, 12 Oct 2001 13:52:34 -0500 Received: from scot.genroco.com (scot.genroco.com [192.133.120.125]) by gi2.genroco.com (8.9.3/8.9.3) with SMTP id NAA19206; Fri, 12 Oct 2001 13:52:33 -0500 Message-ID: <02a901c1534f$0e140780$7d7885c0@genroco.com> From: "Scot W. Hetzel" To: "Haapanen, Tom" , "'isp@freebsd.org'" References: <6B3C6B6F7AA2D511A35E0080C86993435961@syncro.metrics.com> Subject: Re: FreeBSD, FrontPage and DES Date: Fri, 12 Oct 2001 13:52:32 -0500 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 5.50.4522.1200 X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4522.1200 Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org From: "Haapanen, Tom" > Has anyone successfully installed FrontPage 2002 extensions on FreeBSD 4.4? > > I managed to get through the install process -- the 2002 extensions > explicitly support FreeBSD, and I now get a few steps into the > FrontPage-to-Apache connection. But I fail in the authentication process. > > I think this is because FrontPage uses DES, while FreeBSD 4.4 defaults to > MD5. Or at least that's what my net.research tells me. > > So, fin, I used CVS to retrieve new DES crypto sources. I successfully > built the libdescrypt* libraries, copied them to /usr/lib, and symlinked the > libcrypt* libdescrypt* (four separate libraries). But when I try to change > a password (plain old passwd command), i get an error: > As you found out you can't do this in 4.4. > Can anyone point me in the right direction? > The problem is that the FreeBSD FrontPage Ext's were build for a FreeBSD 3.x system, which had libdescrypt* linked to libcrypt*. The problem is the FP Exts generate an invalid MD5 password on a system that has either libscrypt is linked to libcrypt (FreeBSD 3.x, 4.[1-3]) or when used with libcrypt (4.4+). There are 3 possible ways to solve this problem: 1. Use the BSDi FP Exts which have the descrypt routines statically linked. 2. (I haven't tested this) Change login.conf's passwd_format to des, which will cause libcrypt (4.4+) to create DES passwords: default:\ :passwd_format=md5:\ Or you could try changing the class for the user that needs to run the FP Ext's (fpsrvadm.exe, ows*.exe) to "des_users". 3. use htpasswd to change the passwords to the correct MD5 password. You will need to locate the password files from the .htaccess files. I have reported this DES/MD5 password problem to Ready-to-Run (www.rtr.com) awhile ago, but haven't heard if they had fixed the problem with the FreeBSD FP Exts. Scot To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message