Koozali.org: home of the SME Server

Legacy Forums => General Discussion (Legacy) => Topic started by: Lils on August 22, 2001, 02:54:39 AM

Title: Password Authentication
Post by: Lils on August 22, 2001, 02:54:39 AM

RedHat Linux with e-smith 4.1.2
Level: Beginner

I would like to authenticate a user ID and password via some script (preferrably Perl).  I was informed that the version of e-smith that I'm using on my server has a different algorithum setup than what Unix/Linux has on-hand.  Thus I can't use something simple like Perl's crypt() function to encrypt text and compare it to the already encypted passwords found in /etc/shadow.

How would I go about validating a user ID and password?  What type of encryption is being used by e-smith 4.1.2?  Any help on the matter would be most appreciated!  Thanks!

Title: Re: Password Authentication
Post by: Peter Hollandare on August 22, 2001, 10:32:47 PM

Lils wrote:
> I would like to authenticate a user ID and password via some
> script (preferrably Perl).  I was informed that the version
> of e-smith that I'm using on my server has a different
> algorithum setup than what Unix/Linux has on-hand.

Excellent howto can be found here : http://netsourced.com/servers/docs/website-access-security-howto.html

> How would I go about validating a user ID and password?
> What type of encryption is being used by e-smith 4.1.2?  Any help
> on the matter would be most appreciated!  Thanks!

It uses MD5, (password) from a defined file that you create eg .htaccess


Cheers Peter