Closed (fixed)
Project:
HTPasswd Sync
Version:
6.x-1.0
Component:
Code
Priority:
Critical
Category:
Bug report
Assigned:
Reporter:
Created:
20 Mar 2009 at 20:35 UTC
Updated:
10 Apr 2009 at 21:40 UTC
Under M$ Windows apache checks not crypted but plain text passwords. For example admin's password is "123" and password file must be admin:123 instead of admin:XrfmOmcNtqcAk for authType Basic.
So make *nix required OS or make it work under windows.
Comments
Comment #1
fasdalf@fasdalf.ru commentedAs i understood, users could log in with theyr names and passwords exactly as in drupal login form.
Or they must use new passwords from module's table?
Comment #2
m.fu commentedI will check the windows support, but I will not store password in cleartext.
The modules duplicates your password into the htpasswd file. However, it cannot decrypt the password, it can only intercept change. Hence, it only update htpassword when you change your password or create an user.
Therefore installing on a running drupal site, requires users to change their password (even to the same password) to get the htpasswd file update.
Comment #3
m.fu commentedWindows apache server require apache md5 digest, which is not a standard md5.
I will update as soon as I have found a php implementation of this algorythm.
In the meantime I'll mark this project as unix only.
Comment #4
fasdalf@fasdalf.ru commentedI'll notyfy you if i find it first. Thank you.
Comment #5
m.fu commentedAdd option to use SHA-1 which is crossplatform.
Comment #6
m.fu commented