Thu, 01 Mar 2007 00:10:19 +0100 Flyspray::mod_auth_mysql: Recently opened tasks http://www.heuer.org/flyspray/ Ueli Heuer Thu, 01 Mar 2007 00:10:02 +0100

This module makes use of the function apr_password_validate() of the
apache libraries. This functions can handle crypted passwords, md5-
and sha password hashes. The common problem is that the md5- and the
sha-hashes need some markes: you can easly create the values with the
htpasswd utility:


# create a md5 hash
largo:bin$ ./htpasswd -nbm user password
user:$apr1$5T1td/..$ppqva5bmyS2CHhJWcyX1s/

# create a SHA hash
largo:bin$ ./htpasswd -nbs user password
user:{SHA}W6ph5Mm5Pz8GgiULbPgzG37mj9g=

# create a 'normal' encrypt hash
largo:bin$ ./htpasswd -nb user password
user:K4YPncTjM9HPo

# the output will change eacht time you execute htpasswd cause it uses
# some salt to change the output (if two users uses the same password,
# you'll not recognise this)

You may use any of the hashes as long you are putting the whole password
hash into the database ( e.g. you use "$apr1$5T1td/..$ppqva5bmyS2CHhJWcyX1s/",
"{SHA}W6ph5Mm5Pz8GgiULbPgzG37mj9g=" or "K4YPncTjM9HPo" into the field
user_password in the database (of course without the "!).\\
Cleartext passwords **will NOT** work and I'm not willing to add some code to support cleartext passwords!


**NOTE>>** You should extend the user_password field in the database from 20
chars to 120 or the database 'll cut off some chars from your md5
or sha hash
]]> http://www.heuer.org/flyspray/index.php?do=details&task_id=104 http://www.heuer.org/flyspray/index.php?do=details&task_id=104 Ueli Heuer Sat, 02 Dec 2006 15:50:49 +0100 http://www.heuer.org/flyspray/index.php?do=details&task_id=99 http://www.heuer.org/flyspray/index.php?do=details&task_id=99 Mr Super User Sun, 21 Aug 2005 13:50:56 +0200 Beobachtet wurde dies bei apache 2.0.54 mit dem worker MPM (threads)]]> http://www.heuer.org/flyspray/index.php?do=details&task_id=40 http://www.heuer.org/flyspray/index.php?do=details&task_id=40