Date: Mon, 29 Nov 1999 15:19:27 -0700 From: "J.C. Frazier" <wolfman@csocs.com> To: Jonathan Weaver <jweaver@websitefactory.net> Cc: freebsd-isp@FreeBSD.ORG Subject: Re: apache13-fp-modssl problem with passwords Message-ID: <3842FBEF.3D8E564C@csocs.com> References: <3287515556.943885353@asbestos.websitefactory.net>
next in thread | previous in thread | raw e-mail | index | archive | help
Jonathan Weaver wrote: > --On Sunday, November 28, 1999 11:42 PM -0700 "J.C. Frazier" > <wolfman@csocs.com> wrote: > > > Tom wrote: > > > >> > bash-2.03# file author.exe > >> > author.exe: BSD/OS i386 compact demand paged executable > >> > >> Statically link (since it doesn't say dynamic, it has to be static), > >> and it is a BSD/OS executable, and I doubt that the crypt() function > >> on BSD/OS knows anything about MD5 passwords. > >> > >> > I also checked the service.pwd files and it is encrypting it in DES: > >> > bash-2.03# john /usr2/www/user/_vti_pvt/service.pwd > >> > Loaded 1 password (Standard DES [24/32 4K]) > >> > correctpassword (user) <--- (real pass and username left > >> > out of this e-mail) > >> > > >> > Just not sure about the process of decryption on frontpage or how the > >> > passwords are matched... > >> > >> Try a DES password in master.passwd. If frontpage works with that, > >> then you must either use DES passwords for everyone who wants to use > >> frontpage, or get RTR Software to make a FreeBSD build of the frontpage > >> executables. > >> > >> > J.C. Frazier > >> > >> Tom > >> > >> To Unsubscribe: send mail to majordomo@FreeBSD.org > >> with "unsubscribe freebsd-isp" in the body of the message > > > > Very Interesting indeed. I did as you sugested and changed a users > > password in /etc/master.passwd into des. Failed login via telnet/ftp, > > and password mismatch via frontpage. I then tried it with vipw so that > > all the dbs would be updated. Same results. It seems my crypt() doesn't > > know the difference between md5, des, and a hole in it's head. > > > > Did you install the DES libraries? It is a seperate package that has to be > installed before > you can use DES. > > - Jonathan > > > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > > with "unsubscribe freebsd-isp" in the body of the message > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-isp" in the body of the message Yes, DES is installed: bash-2.03# ls -l /usr/lib/*des* -r--r--r-- 1 root wheel 53118 Nov 28 21:14 /usr/lib/libdes.a lrwxr-xr-x 1 root wheel 11 Nov 28 21:14 /usr/lib/libdes.so -> libdes.so.3 -r--r--r-- 1 root wheel 35678 Nov 28 21:14 /usr/lib/libdes.so.3 -r--r--r-- 1 root wheel 56608 Nov 28 21:14 /usr/lib/libdes_p.a -r--r--r-- 1 root wheel 13018 Nov 25 22:04 /usr/lib/libdescrypt.a lrwxr-xr-x 1 root wheel 16 Nov 25 22:04 /usr/lib/libdescrypt.so -> libdescrypt.so.2 -r--r--r-- 1 root wheel 12965 Nov 25 22:04 /usr/lib/libdescrypt.so.2 -r--r--r-- 1 root wheel 14750 Nov 25 22:04 /usr/lib/libdescrypt_p.a bash-2.03# ls -l /usr/lib/*crypt* lrwxrwxrwx 1 root wheel 11 Sep 18 11:16 /usr/lib/libcrypt.a -> libscrypt.a lrwxrwxrwx 1 root wheel 12 Sep 18 11:16 /usr/lib/libcrypt.so -> libscrypt.so lrwxrwxrwx 1 root wheel 14 Sep 18 11:16 /usr/lib/libcrypt.so.2 -> libscrypt.so.2 lrwxrwxrwx 1 root wheel 13 Sep 18 11:17 /usr/lib/libcrypt_p.a -> libscrypt_p.a -r--r--r-- 1 root wheel 13018 Nov 25 22:04 /usr/lib/libdescrypt.a lrwxr-xr-x 1 root wheel 16 Nov 25 22:04 /usr/lib/libdescrypt.so -> libdescrypt.so.2 -r--r--r-- 1 root wheel 12965 Nov 25 22:04 /usr/lib/libdescrypt.so.2 -r--r--r-- 1 root wheel 14750 Nov 25 22:04 /usr/lib/libdescrypt_p.a -r--r--r-- 1 root wheel 6194 Nov 25 22:04 /usr/lib/libscrypt.a lrwxr-xr-x 1 root wheel 14 Nov 25 22:04 /usr/lib/libscrypt.so -> libscrypt.so.2 -r--r--r-- 1 root wheel 7579 Nov 25 22:04 /usr/lib/libscrypt.so.2 -r--r--r-- 1 root wheel 6684 Nov 25 22:04 /usr/lib/libscrypt_p.a J.C. Frazier To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3842FBEF.3D8E564C>