htpasswd with empty password

Erich Titl <[email protected]> Fri, 23 Feb 2018 15:50:27 +0000
Newsgroups gmane.linux.leaf.devel
Message-ID <[email protected]>
Hi KP

I guess it is possible to check against an empty password using the new
htpasswd executable, at leat the one from the apache2 works as specified

mega@leafbuilder64:~/leaf/devel/bering-uclibc/repo/webconf/var/webconf/www$
htpasswd -vb .htpasswd admin ""
Password for user admin correct.
mega@leafbuilder64:~/leaf/devel/bering-uclibc/repo/webconf/var/webconf/www$
echo $?
0
mega@leafbuilder64:~/leaf/devel/bering-uclibc/repo/webconf/var/webconf/www$
htpasswd -vb .htpasswd admin fddddlll
password verification failed
mega@leafbuilder64:~/leaf/devel/bering-uclibc/repo/webconf/var/webconf/www$
echo $?
3

So we can distribute a .htpasswd file with an empty password and still
check it and react accordingly. Will need to check this with the
htpasswd binary on LEAF and possibly with pwcrypt too.

cheers

ET

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot


_______________________________________________
leaf-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/leaf-devel
smime.p7s (application/pkcs7-signature, 1.9 KB) - not displayed