From owner-freebsd-isp Thu Oct 19 10:18:23 2000 Delivered-To: freebsd-isp@freebsd.org Received: from gifw.genroco.com (genroco.com [205.254.195.202]) by hub.freebsd.org (Postfix) with ESMTP id BAB3737B4F9 for ; Thu, 19 Oct 2000 10:18:15 -0700 (PDT) Received: from gi2.genroco.com (gi2.genroco.com [192.133.120.3]) by gifw.genroco.com (8.9.3/8.9.3) with ESMTP id MAA24477; Thu, 19 Oct 2000 12:18:12 -0500 Received: from scot.genroco.com (scot.genroco.com [192.133.120.125]) by gi2.genroco.com (8.9.3/8.9.3) with SMTP id MAA02820; Thu, 19 Oct 2000 12:18:11 -0500 Message-ID: <003601c039f0$8f594360$7d7885c0@genroco.com> From: "Scot W. Hetzel" To: "Christian Holz" , References: <00e501c039ea$1eda08f0$03c209c2@fastlanep2x7jl> Subject: Re: DES and MD5 Date: Thu, 19 Oct 2000 12:18:10 -0500 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 5.00.2919.6600 X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2919.6600 Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org From: "Christian Holz" > I've got a question concerning DES and MD5 encryption: > > I've installed my server using DES encryption. > Many of our customers are runnung a perl program which uses crypt() to > create the passwords for .htaccess files. > Since apache doesn't support DES encryptet passwords i'd like to change to > MD5 encryption or at least Apache does support both DES & MD5 passwords, if libcrypt is linked to libdescrypt. > force perl/frontpage to use MD5 (Crypt::PasswdMD5 should be doing this, but > instead returns DES encryptet passwords). > You can authenticate with MD5 passwords with FrontPage Exts, but you can't create the MD5 passwords with the FrontPage Exts. The BSDi FP Exts have libdescrypt compiled in statically. Instead you have to create these passwords manually. The FreeBSD FP Exts has libcrypt compiled dynamically, so MD5 passwords should be possible. But, the FreeBSD FP Exts create invalid MD5 passwords, thus authentication fails. The FreeBSD FP Exts do work correctly as long as you use DES passwords, and have libcrypt linked to libdescrypt. > I couldn't find any hint in the manual how to do it. There aren't many > accounts on the server, so i wouldn't mind to create all user > accounts again. > > The only thing I did was changing the links in /usr/lib/ for libcrypt etc. > But that didn't help. Scot To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message