Re: Apache 2.2 authentication against a Mysql Database

[FINESEC <info@xxxxxxxxxxx>]

Hello,

Apache doesn't support password hashes generated by mysql. Use htpasswd or openssl to generate hashes that are supported by apache:

htpasswd -nbm username password

openssl passwd -apr1 password

Adam Black,

FINESEC.COM - authentication software for Apache

On Mon, Nov 19, 2012 at 4:10 PM, Igor Galić <i.galic@xxxxxxxxxxxxxx> wrote:

----- Original Message -----
> Hello,
>

> When I inserted the user in to the mysql database I have a field
> called password it's a varchar(64) field. For the password value I
> used mysql's sha function so the entry looked like:
>
> sha('password')
>
> won the insert line.
>
> I'm not sure if that answers your question.

Let me repeat my last question: Does the password look like httpd
expects the password to look?

Now, let me quote from the document
( http://httpd.apache.org/docs/2.2/misc/password_encryptions.html )
I linked:

""""
SHA1

$ htpasswd -nbs myName myPassword
myName:{SHA}VBPuJHI7uixaa6LQGWx4s+5GKNE=
""""

Does your password look like this?

   {SHA}VBPuJHI7uixaa6LQGWx4s+5GKNE=

i

--
Igor Galić

Tel: +43 (0) 664 886 22 883
Mail: i.galic@xxxxxxxxxxxxxx
URL: http://brainsware.org/
GPG: 6880 4155 74BD FD7C B515  2EA5 4B1D 9E08 A097 C9AE


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx