Re: htpasswd with empty password (more)

Hi Erich;

SF mail is really slow, so mails are crossing today...

I cannot see how pwcrypt allows to create a user:password pair?

kp

On Fr, 2018-02-23 at 16:10 +0000, Erich Titl wrote:
> Hi KP
> 
> I guess it is possible to check against an empty password using the
> new
> htpasswd executable, at leat the one from the apache2 works as
> specified
> 
> ...
> 
> I checked with the htpasswd utility on LEAF, unfortunately this
> version
> is _not_ the complete one from the apache2 distribution and does not
> allow verification.
> 
> Now using the pwcrypt variant it looks like a verification is
> possible
> 
> This generates an empty password
> 
> AP# pwcrypt ""
> p/BQnHmqN25Y6AP#
> 
> Here we try to verify/regenerate the empty password
> 
> AP# pwcrypt -s p/  ""
> p/BQnHmqN25Y6AP#
> 
> Now obviously the hashes match, we can deduct that this is the empty
> password and react accordingly.
> 
> cheers
> 
> ET
> 
> 
> -------------------------------------------------------------------
> -----------
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
> _______________________________________________
> leaf-devel mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/leaf-devel

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot