Topic: Password Authentication

[Lils]

RedHat Linux with e-smith 4.1.2
Level: Beginner

I would like to authenticate a user ID and password via some script (preferrably Perl).  I was informed that the version of e-smith that I'm using on my server has a different algorithum setup than what Unix/Linux has on-hand.  Thus I can't use something simple like Perl's crypt() function to encrypt text and compare it to the already encypted passwords found in /etc/shadow.

How would I go about validating a user ID and password?  What type of encryption is being used by e-smith 4.1.2?  Any help on the matter would be most appreciated!  Thanks!

[Peter Hollandare]

Lils wrote:
> I would like to authenticate a user ID and password via some
> script (preferrably Perl).  I was informed that the version
> of e-smith that I'm using on my server has a different
> algorithum setup than what Unix/Linux has on-hand.

Excellent howto can be found here : http://netsourced.com/servers/docs/website-access-security-howto.html

> How would I go about validating a user ID and password?
> What type of encryption is being used by e-smith 4.1.2?  Any help
> on the matter would be most appreciated!  Thanks!

It uses MD5, (password) from a defined file that you create eg .htaccess


Cheers Peter