Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 29 Nov 1999 14:22:33 -0500
From:      Jonathan Weaver <jweaver@websitefactory.net>
To:        "J.C. Frazier" <wolfman@csocs.com>, Tom <tom@sdf.com>
Cc:        freebsd-isp@FreeBSD.ORG
Subject:   Re: apache13-fp-modssl problem with passwords
Message-ID:  <3287515556.943885353@asbestos.websitefactory.net>
In-Reply-To: <38422055.2906C9B2@csocs.com>

next in thread | previous in thread | raw e-mail | index | archive | help


--On Sunday, November 28, 1999 11:42 PM -0700 "J.C. Frazier"
<wolfman@csocs.com> wrote:

> Tom wrote:
> 
>> > bash-2.03# file author.exe
>> > author.exe: BSD/OS i386 compact demand paged executable
>> 
>>   Statically link (since it doesn't say dynamic, it has to be static),
>>   and it is a BSD/OS executable, and I doubt that the crypt() function
>> on BSD/OS knows anything about MD5 passwords.
>> 
>> > I also checked the service.pwd files and it is encrypting it in DES:
>> > bash-2.03# john /usr2/www/user/_vti_pvt/service.pwd
>> > Loaded 1 password (Standard DES [24/32 4K])
>> > correctpassword          (user)      <--- (real pass and username left
>> > out of this e-mail)
>> > 
>> > Just not sure about the process of decryption on frontpage or how the
>> > passwords are matched...
>> 
>>   Try a DES password in master.passwd.  If frontpage works with that,
>>   then you must either use DES passwords for everyone who wants to use
>> frontpage, or get RTR Software to make a FreeBSD build of the frontpage
>> executables.
>> 
>> > J.C. Frazier
>> 
>> Tom
>> 
>> To Unsubscribe: send mail to majordomo@FreeBSD.org
>> with "unsubscribe freebsd-isp" in the body of the message
> 
> Very Interesting indeed.  I did as you sugested and changed a users
> password in /etc/master.passwd into des.  Failed login via telnet/ftp,
> and password mismatch via frontpage.  I then tried it with vipw so that
> all the dbs would be updated. Same results.  It seems my crypt() doesn't
> know the difference between md5, des, and a hole in it's head.
> 

Did you install the DES libraries? It is a seperate package that has to be
installed before
you can use DES.

		- Jonathan


> 
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-isp" in the body of the message






To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3287515556.943885353>