Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 25 Oct 2000 14:25:51 -0500 (CDT)
From:      Mike Meyer <mwm@mired.org>
To:        Blake Swensen <blake@pyramus.com>
Cc:        questions@freebsd.org
Subject:   Re: Perl crypt(), htpasswd, and 4.1-RELEASE
Message-ID:  <14839.13247.724401.568040@guru.mired.org>
In-Reply-To: <80382767@toto.iv>

next in thread | previous in thread | raw e-mail | index | archive | help
Blake Swensen writes:
> Have written a script which uses the perl crypt() command to
> create/change passwords as a replacement for htpasswd.  This worked
> perfectly on 2.1.6-RELEASE, and now that I have upgraded to 4.1-RELEASE
> the encryption scheme seems to be different and all of my .htaccess
> passwords are broken.
>
> Can anyone shed some light on what might be happening here? ... htpasswd
> will correctly encrypt the password, but perl crypt() will not.
> Just FYI, I am using exactly the same version of httpd & htpasswd that
> was running on the old 2.1.6 system, restored from backup.

And presumably *built* on 2.1.6. Unless you're using a version of Perl
from 2.1.6 restored from backup (which is a bad idea), that's almost
certainly the problem. Perl is using the 4.1 system crypt() function,
but your 2.1.6 binaries have the 2.1.6 system crypt() function.

If you recompile httpd, perl's crypt will start working again. If you
want to use htpasswd as well, you need to recompile that.  However,
the old password files used by .htaccess will quit working. 4.1 allows
you to chose a number of different schemes for password encryption,
and you may be able to fix the problem by fiddling with that, but I'm
not familiar with the choices.

	<mike



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?14839.13247.724401.568040>