Re: [Proftpd-user] Password issues with auth file from older version?

I've gotten more insight on the issue. The hashes that are
$1<11-char-string> are actually des hashes using '$1' as the salt. I was
able to recreate the hash with: openssl passwd -crypt -salt '$1'.

Maybe the starting '$' character is making the mod_auth_file not think it's
a des hash?



On Thu, Apr 16, 2020 at 12:34 AM Dieter Bloms <[email protected]> wrote:

> Hello Robert,
>
> are you sure it is a password problem ?
> I use proftpd1.3.6b on debian buster and created the passwords long time
> ago with the "openssl passwd" command.
> It creates the 13 char strings and it works till now.
>
> Did you compile proftpd on your own, what did the debug log say ?
>
> On Wed, Apr 15, Robert wrote:
>
> > I'm moving proftpd settings to a new server using the old auth file
> > (mod_auth) but some users can not login.
> >
> > I think a clue is with the password hash for the users:
> >
> >    1. works: $1$<8-char-string>$<22-char-string>
> >    2. not work: $1<11-char-string>
> >    3. not work: <13-char-string>
> >
> > From my research:
> >
> >    1. Looks to be md5-based + salt. These are recent users and the hash
> >    should be generated by ftpasswd.
> >    2. Seems like md5 but not sure how they were generated.
> >    3. 13-character length seems to indicate des hash. Not sure how it was
> >    generated.
> >
> > How would I get the new system to accept logins using the older-style
> > hashes? I know there may be security issues with the older hash types but
> > the old server is going away very soon and that is a more pressing
> concern.
>
>
> --
> Regards
>
>   Dieter
>
> --
> I do not get viruses because I do not use MS software.
> If you use Outlook then please do not put my email address in your
> address-book so that WHEN you get a virus it won't use my address in the
> From field.
>
>
> _______________________________________________
> ProFTPD Users List   <[email protected]>
> Unsubscribe problems?
> http://www.proftpd.org/list-unsub.html
>

_______________________________________________
ProFTPD Users List   <[email protected]>
Unsubscribe problems?
http://www.proftpd.org/list-unsub.html