Marc Zucchelli on 21 Jan 2006 16:13:58 -0000 |
I got crypt(3) to produce accurate md5 hashes, and I got authentiation working with the perl PAM Module non-interactively with the conversatin feature, its perfect. Now I have a decision to make, thanks for the info! --- Pat Regan <thehead@patshead.com> wrote: > Marc Zucchelli wrote: > > I am reinventing the wheel again, I am building a > > webhosting control panel, and I would like users > to > > sign in with their FTP password. I am trying to > > figure out the best way of accomplishing this. > > > > 1. I could keep an updated md5 hash of their > password > > in a database that I can authenticate against. > > > > 2. I could set /etc/shadow to use md5 and > > authenticate against that, this way the password > hash > > will only be stored in one place, which is good. > The > > only problem is that: > > echo "123456" | md5sum > > > > gives me: > > > > f447b20a7fcbf53a5d5be013ea0b15af > > > > But an md5 password of 123456 in /etc/shadow looks > > more like this: > > > > $1$IlxzSzzz$Iagtf0Kf88rsCAUXzUlKf1 > > > > How am I supposed to compare the two? > > You shouldn't have to know how any of this is > implemented, and you > probably should query against PAM. I don't know > what language you are > using, but this Perl module seems to be the sort of > thing you should use: > > http://search.cpan.org/~nikip/Authen-PAM-0.16/d/PAM.pm > > Pat > > ___________________________________________________________________________ > Philadelphia Linux Users Group -- > http://www.phillylinux.org > Announcements - > http://lists.phillylinux.org/mailman/listinfo/plug-announce > General Discussion -- > http://lists.phillylinux.org/mailman/listinfo/plug > __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com ___________________________________________________________________________ Philadelphia Linux Users Group -- http://www.phillylinux.org Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce General Discussion -- http://lists.phillylinux.org/mailman/listinfo/plug
|
|