Mailing-List: contact user-help@couchdb.apache.org; run by ezmlm
Precedence: bulk
Reply-To: user@couchdb.apache.org
Received-SPF: pass (nike.apache.org: local policy)
From: Jim Klo <jim.klo@sri.com>
To: "<user@couchdb.apache.org>" <user@couchdb.apache.org>
CC: "user@couchdb.apache.org" <user@couchdb.apache.org>
Subject: Re: Migrate htpasswd users to _users?
Thread-Topic: Migrate htpasswd users to _users?
Thread-Index: AQHNRPKHf8joJJ5EU0CF8msRvz71OZbwI9aAgAAalQA=
Date: Fri, 8 Jun 2012 03:47:19 +0000
Message-ID: <AF5D7A70-8CA4-4AEF-974E-DE5B82D44D7B@sri.com>
References: <271AB806-4C79-4371-9BDE-12EF2C2D885C@sri.com>
 <CAC7vo1AV4P++2Rm=D99H_VOAfDYnWOqq8i5YvUHztwG-efiYHw@mail.gmail.com>
In-Reply-To: 
 <CAC7vo1AV4P++2Rm=D99H_VOAfDYnWOqq8i5YvUHztwG-efiYHw@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
Content-Type: multipart/signed; micalg=sha1;
	boundary="Apple-Mail-10C5C81C-409B-4656-ABF6-8D6D76EA5511";
	protocol="application/pkcs7-signature"
MIME-Version: 1.0

--Apple-Mail-10C5C81C-409B-4656-ABF6-8D6D76EA5511
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=us-ascii

As we're using whatever the default is on Ubuntu (which is crypt() per manpa=
ge http://linux.die.net/man/1/htpasswd)

Is there an existing authentication handler plugin that uses crypt? While I'=
m not even close to even call myself an Erlang noob - from here it doesn't s=
eem like it would too difficult to alter  https://github.com/apache/couchdb/=
blob/1.2.x/src/couchdb/couch_httpd_auth.erl but have no idea  where to start=
 on modifying as a plugin.=20

Worst case I just make all my users reset their passwords.=20

- Jim


Sent from my iPad

On Jun 7, 2012, at 7:12 PM, "Keith Gable" <ziggy@ignition-project.com> wrote=
:

> htpasswd supports several different hash schemes. $apr1$ is the default an=
d
> isn't very portable (though is supported by nginx) because it's not exactl=
y
> MD5 as generated by crypt().
> On Jun 7, 2012 4:15 PM, "Jim Klo" <jim.klo@sri.com> wrote:
>=20
>> Wondering if there is a way to easily migrate a flat file of htpasswd
>> users into couchdb _users?
>>=20
>> htpasswd typically uses crypt() which I think i based off a MD5, and
>> couchdb uses SHA1.
>>=20
>> So essentially is there a stable authentication handler out there that
>> replicates htpasswd?
>>=20
>> Thanks,
>>=20
>> - Jim
>>=20
>> *
>> Jim Klo
>> Senior Software Engineer
>> Center for Software Engineering
>> SRI International
>> *
>>=20
>>=20

--Apple-Mail-10C5C81C-409B-4656-ABF6-8D6D76EA5511
Content-Disposition: attachment; filename="smime.p7s"
Content-Type: application/pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
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--Apple-Mail-10C5C81C-409B-4656-ABF6-8D6D76EA5511--