From owner-freebsd-questions@FreeBSD.ORG  Mon Jul  7 15:29:08 2008
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id D078D106564A
	for <freebsd-questions@freebsd.org>;
	Mon,  7 Jul 2008 15:29:08 +0000 (UTC)
	(envelope-from jerrymc@gizmo.acns.msu.edu)
Received: from gizmo.acns.msu.edu (gizmo.acns.msu.edu [35.8.1.43])
	by mx1.freebsd.org (Postfix) with ESMTP id 993AC8FC0A
	for <freebsd-questions@freebsd.org>;
	Mon,  7 Jul 2008 15:29:08 +0000 (UTC)
	(envelope-from jerrymc@gizmo.acns.msu.edu)
Received: from gizmo.acns.msu.edu (localhost [127.0.0.1])
	by gizmo.acns.msu.edu (8.13.6/8.13.6) with ESMTP id m67FQYlq074611;
	Mon, 7 Jul 2008 11:26:34 -0400 (EDT)
	(envelope-from jerrymc@gizmo.acns.msu.edu)
Received: (from jerrymc@localhost)
	by gizmo.acns.msu.edu (8.13.6/8.13.6/Submit) id m67FQYeN074610;
	Mon, 7 Jul 2008 11:26:34 -0400 (EDT) (envelope-from jerrymc)
Date: Mon, 7 Jul 2008 11:26:34 -0400
From: Jerry McAllister <jerrymc@msu.edu>
To: Jos Chrispijn <jos@webrz.net>
Message-ID: <20080707152634.GI74244@gizmo.acns.msu.edu>
References: <001201c8e02b$9c6e9ed0$d54bdc70$@net>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <001201c8e02b$9c6e9ed0$d54bdc70$@net>
User-Agent: Mutt/1.4.2.2i
Cc: freebsd-questions@freebsd.org
Subject: Re: .htaccess or OS related?
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 07 Jul 2008 15:29:08 -0000

On Mon, Jul 07, 2008 at 02:18:49PM +0200, Jos Chrispijn wrote:

> I ran into a problem last night that I was able to solve, but generated a
> question:
> 
> I have this hosting provider (uses Debian OS) on which I can't use htpasswd
> to generate user and password to protect a single file. 

Probably was not in your path.   You may have to find out where it
is and add that directory to your path or use the full pathname when
invoking it.


> 
> To have this done I solved it as follows: did a htpasswd on my own server
> (FreeBSD 7) and simply copied the file with the user:password (scrambled) to
> my home directory I have with this hosting provider and referred in the
> .htaccess to it. And now comes the fun stuff: it worked without probs.
> 
> 
> So the algorithm that is used on FreeBSD to scramble a user password is the
> same as it is used by Debian? Isn't that a security gap?

That is something done by Apache and is common to all implementations
unless you change it.   I never looked, but I think it uses one of
the commonly use encryption algorithms, maybe even the same one
used for regular passwords.


////jerry


> 
> Jos
> 
> _______________________________________________
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org"