Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
Received-SPF: pass (asf.osuosl.org: domain of jorton@redhat.com designates
 66.187.233.31 as permitted sender)
Date: Thu, 11 Aug 2005 11:41:41 +0100
From: Joe Orton <jorton@redhat.com>
To: marcel.kuiper@nl.abnamro.com
Cc: users@httpd.apache.org
Message-ID: <20050811104141.GA1094@redhat.com>
Mail-Followup-To: marcel.kuiper@nl.abnamro.com, users@httpd.apache.org
References: 
 <OFBA4C5406.D7A98948-ONC125705A.0037F9A7-C125705A.0039223B@abnamro.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
In-Reply-To: 
 <OFBA4C5406.D7A98948-ONC125705A.0037F9A7-C125705A.0039223B@abnamro.com>
User-Agent: Mutt/1.4.2.1i
Subject: Re: [users@httpd] Authentication on Solaris fails when password > 8
 chars and using MD5 encoded passwords (or digest)

On Thu, Aug 11, 2005 at 12:24:06PM +0200, marcel.kuiper@nl.abnamro.com wrote:
> When replacing getpass() with getpassphrase() on Solaris (does the same but
> with passwords up to 256 chars) all works fine but this is not a portable
> solution I guess.
> Another option would be truncating the password that the client had send to
> 8 chars before validating (but many people like longer passwords for their
> better strength)
> 
> Any thoughts for a portable fix?

2.0.x (really, APR) will use getpassphrase() if available.

Regards,

joe


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org