Date: Thu, 19 Oct 2000 12:18:10 -0500 From: "Scot W. Hetzel" <hetzels@westbend.net> To: "Christian Holz" <christian@fastlane.de>, <freebsd-isp@FreeBSD.ORG> Subject: Re: DES and MD5 Message-ID: <003601c039f0$8f594360$7d7885c0@genroco.com> References: <00e501c039ea$1eda08f0$03c209c2@fastlanep2x7jl>
next in thread | previous in thread | raw e-mail | index | archive | help
From: "Christian Holz" <christian@fastlane.de> > I've got a question concerning DES and MD5 encryption: > > I've installed my server using DES encryption. > Many of our customers are runnung a perl program which uses crypt() to > create the passwords for .htaccess files. > Since apache doesn't support DES encryptet passwords i'd like to change to > MD5 encryption or at least Apache does support both DES & MD5 passwords, if libcrypt is linked to libdescrypt. > force perl/frontpage to use MD5 (Crypt::PasswdMD5 should be doing this, but > instead returns DES encryptet passwords). > You can authenticate with MD5 passwords with FrontPage Exts, but you can't create the MD5 passwords with the FrontPage Exts. The BSDi FP Exts have libdescrypt compiled in statically. Instead you have to create these passwords manually. The FreeBSD FP Exts has libcrypt compiled dynamically, so MD5 passwords should be possible. But, the FreeBSD FP Exts create invalid MD5 passwords, thus authentication fails. The FreeBSD FP Exts do work correctly as long as you use DES passwords, and have libcrypt linked to libdescrypt. > I couldn't find any hint in the manual how to do it. There aren't many > accounts on the server, so i wouldn't mind to create all user > accounts again. > > The only thing I did was changing the links in /usr/lib/ for libcrypt etc. > But that didn't help. Scot To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?003601c039f0$8f594360$7d7885c0>