Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
Received-SPF: pass (athena.apache.org: domain of info@finesec.com designates
 209.85.214.45 as permitted sender)
MIME-Version: 1.0
In-Reply-To: <25350807.358311.1353337816968.JavaMail.root@brainsware.org>
References: 
 <CAPORhP7kYqftcFudM_N=RTtDZPePRN81GahC_kk6STd2VXfM3w@mail.gmail.com>
	<1900700624.354295.1353249586396.JavaMail.root@brainsware.org>
	<CAPORhP7seuEMbgG+wCsvfjuKuG510ZCPf6tMGUq8QWAZtULA=Q@mail.gmail.com>
	<CAPORhP4vzEo1Dm1djnJ49ovg-18_-UktUGT4q6ha1Z4AoTP5HQ@mail.gmail.com>
	<2040262748.357074.1353316173542.JavaMail.root@brainsware.org>
	<CAPORhP4-CcaXk0btSV7CanchfcvzTswue_gCZkwSRs_9PxzZFg@mail.gmail.com>
	<25350807.358311.1353337816968.JavaMail.root@brainsware.org>
Date: Mon, 19 Nov 2012 16:27:44 +0100
Message-ID: 
 <CAH3bNbFus0Y8FhVun-8eCnsKrGL66VCTq1m_peb1_X4TwaXO6A@mail.gmail.com>
From: FINESEC <info@finesec.com>
To: users@httpd.apache.org
Content-Type: multipart/alternative; boundary=00151747c15454308504cedac2f4
Subject: Re: [users@httpd] Apache 2.2 authentication against a Mysql Database

--00151747c15454308504cedac2f4
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

Hello,

Apache doesn't support password hashes generated by mysql. Use htpasswd or
openssl to generate hashes that are supported by apache:

htpasswd -nbm username password
openssl passwd -apr1 password

Adam Black,
FINESEC.COM - authentication software for Apache

On Mon, Nov 19, 2012 at 4:10 PM, Igor Gali=C4=87 <i.galic@brainsware.org> w=
rote:

>
>
> ----- Original Message -----
> > Hello,
> >
> > When I inserted the user in to the mysql database I have a field
> > called password it's a varchar(64) field. For the password value I
> > used mysql's sha function so the entry looked like:
> >
> > sha('password')
> >
> > won the insert line.
> >
> > I'm not sure if that answers your question.
>
> Let me repeat my last question: Does the password look like httpd
> expects the password to look?
>
> Now, let me quote from the document
> ( http://httpd.apache.org/docs/2.2/misc/password_encryptions.html )
> I linked:
>
> """"
> SHA1
>
> $ htpasswd -nbs myName myPassword
> myName:{SHA}VBPuJHI7uixaa6LQGWx4s+5GKNE=3D
> """"
>
> Does your password look like this?
>
>    {SHA}VBPuJHI7uixaa6LQGWx4s+5GKNE=3D
>
>
> i
>
> --
> Igor Gali=C4=87
>
> Tel: +43 (0) 664 886 22 883
> Mail: i.galic@brainsware.org
> URL: http://brainsware.org/
> GPG: 6880 4155 74BD FD7C B515  2EA5 4B1D 9E08 A097 C9AE
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>
>

--00151747c15454308504cedac2f4
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div>Hello,</div><div><br></div>Apache doesn&#39;t support password hashes =
generated by mysql. Use htpasswd or openssl to generate hashes that are sup=
ported by apache:<div><br></div><div>htpasswd -nbm username password</div>
<div>openssl passwd -apr1 password</div><div><br></div><div>Adam Black,</di=
v><div><a href=3D"http://FINESEC.COM">FINESEC.COM</a>=C2=A0- authentication=
 software for Apache</div><div><br><div class=3D"gmail_quote">On Mon, Nov 1=
9, 2012 at 4:10 PM, Igor Gali=C4=87 <span dir=3D"ltr">&lt;<a href=3D"mailto=
:i.galic@brainsware.org" target=3D"_blank">i.galic@brainsware.org</a>&gt;</=
span> wrote:<br>
<blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1p=
x #ccc solid;padding-left:1ex"><div class=3D"im"><br>
<br>
----- Original Message -----<br>
&gt; Hello,<br>
&gt;<br>
</div><div class=3D"im">&gt; When I inserted the user in to the mysql datab=
ase I have a field<br>
&gt; called password it&#39;s a varchar(64) field. For the password value I=
<br>
&gt; used mysql&#39;s sha function so the entry looked like:<br>
&gt;<br>
&gt; sha(&#39;password&#39;)<br>
&gt;<br>
&gt; won the insert line.<br>
&gt;<br>
&gt; I&#39;m not sure if that answers your question.<br>
<br>
</div>Let me repeat my last question: Does the password look like httpd<br>
expects the password to look?<br>
<br>
Now, let me quote from the document<br>
( <a href=3D"http://httpd.apache.org/docs/2.2/misc/password_encryptions.htm=
l" target=3D"_blank">http://httpd.apache.org/docs/2.2/misc/password_encrypt=
ions.html</a> )<br>
I linked:<br>
<br>
&quot;&quot;&quot;&quot;<br>
SHA1<br>
<br>
$ htpasswd -nbs myName myPassword<br>
myName:{SHA}VBPuJHI7uixaa6LQGWx4s+5GKNE=3D<br>
&quot;&quot;&quot;&quot;<br>
<br>
Does your password look like this?<br>
<br>
=C2=A0 =C2=A0{SHA}VBPuJHI7uixaa6LQGWx4s+5GKNE=3D<br>
<div class=3D"HOEnZb"><div class=3D"h5"><br>
<br>
i<br>
<br>
--<br>
Igor Gali=C4=87<br>
<br>
Tel: +43 (0) 664 886 22 883<br>
Mail: <a href=3D"mailto:i.galic@brainsware.org">i.galic@brainsware.org</a><=
br>
URL: <a href=3D"http://brainsware.org/" target=3D"_blank">http://brainsware=
.org/</a><br>
GPG: 6880 4155 74BD FD7C B515 =C2=A02EA5 4B1D 9E08 A097 C9AE<br>
<br>
<br>
---------------------------------------------------------------------<br>
To unsubscribe, e-mail: <a href=3D"mailto:users-unsubscribe@httpd.apache.or=
g">users-unsubscribe@httpd.apache.org</a><br>
For additional commands, e-mail: <a href=3D"mailto:users-help@httpd.apache.=
org">users-help@httpd.apache.org</a><br>
<br>
</div></div></blockquote></div><br></div>

--00151747c15454308504cedac2f4--