From owner-freebsd-isp Mon Nov 29 11:22:53 1999 Delivered-To: freebsd-isp@freebsd.org Received: from ns1.websitefactory.net (ns1.websitefactory.net [208.26.83.130]) by hub.freebsd.org (Postfix) with ESMTP id 7711B1529C for ; Mon, 29 Nov 1999 11:22:45 -0800 (PST) (envelope-from jweaver@websitefactory.net) Received: from asbestos.websitefactory.net (asbestos.websitefactory.net [208.26.78.16]) by ns1.websitefactory.net (Postfix) with ESMTP id BECC6AE61E; Mon, 29 Nov 1999 14:23:26 -0500 (EST) Date: Mon, 29 Nov 1999 14:22:33 -0500 From: Jonathan Weaver To: "J.C. Frazier" , Tom Cc: freebsd-isp@FreeBSD.ORG Subject: Re: apache13-fp-modssl problem with passwords Message-ID: <3287515556.943885353@asbestos.websitefactory.net> In-Reply-To: <38422055.2906C9B2@csocs.com> X-Mailer: Mulberry (Win32) [2.0.0b1, s/n U-301192] MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Content-Disposition: inline Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org --On Sunday, November 28, 1999 11:42 PM -0700 "J.C. Frazier" wrote: > Tom wrote: > >> > bash-2.03# file author.exe >> > author.exe: BSD/OS i386 compact demand paged executable >> >> Statically link (since it doesn't say dynamic, it has to be static), >> and it is a BSD/OS executable, and I doubt that the crypt() function >> on BSD/OS knows anything about MD5 passwords. >> >> > I also checked the service.pwd files and it is encrypting it in DES: >> > bash-2.03# john /usr2/www/user/_vti_pvt/service.pwd >> > Loaded 1 password (Standard DES [24/32 4K]) >> > correctpassword (user) <--- (real pass and username left >> > out of this e-mail) >> > >> > Just not sure about the process of decryption on frontpage or how the >> > passwords are matched... >> >> Try a DES password in master.passwd. If frontpage works with that, >> then you must either use DES passwords for everyone who wants to use >> frontpage, or get RTR Software to make a FreeBSD build of the frontpage >> executables. >> >> > J.C. Frazier >> >> Tom >> >> To Unsubscribe: send mail to majordomo@FreeBSD.org >> with "unsubscribe freebsd-isp" in the body of the message > > Very Interesting indeed. I did as you sugested and changed a users > password in /etc/master.passwd into des. Failed login via telnet/ftp, > and password mismatch via frontpage. I then tried it with vipw so that > all the dbs would be updated. Same results. It seems my crypt() doesn't > know the difference between md5, des, and a hole in it's head. > Did you install the DES libraries? It is a seperate package that has to be installed before you can use DES. - Jonathan > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-isp" in the body of the message To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message