htpasswd with empty password (more)

Erich Titl <[email protected]> Fri, 23 Feb 2018 16:10:50 +0000
Newsgroups gmane.linux.leaf.devel
Message-ID <[email protected]>
Hi KP

I guess it is possible to check against an empty password using the new
htpasswd executable, at leat the one from the apache2 works as specified

...

I checked with the htpasswd utility on LEAF, unfortunately this version
is _not_ the complete one from the apache2 distribution and does not
allow verification.

Now using the pwcrypt variant it looks like a verification is possible

This generates an empty password

AP# pwcrypt ""
p/BQnHmqN25Y6AP#

Here we try to verify/regenerate the empty password

AP# pwcrypt -s p/  ""
p/BQnHmqN25Y6AP#

Now obviously the hashes match, we can deduct that this is the empty
password and react accordingly.

cheers

ET

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot


_______________________________________________
leaf-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/leaf-devel
smime.p7s (application/pkcs7-signature, 1.9 KB) - not displayed