>Number: 5226
>Category: os-windows
>Synopsis: Can't create password files using the crypt algorithm under
>Windows
>Confidential: no
>Severity: serious
>Priority: medium
>Responsible: apache
>State: open
>Class: support
>Submitter-Id: apache
>Arrival-Date: Mon Nov 1 00:30:01 PST 1999
>Last-Modified:
>Originator: [EMAIL PROTECTED]
>Organization:
apache
>Release: 1.3.9
>Environment:
Windows 98
>Description:
The chunk of code below sees to it that you can't create password files using
CRYPT under Windows. It is desirable to be able to do this to enable .htpasswd
files, hosted on *nix systems, to be created in a Windows environment.
#ifdef WIN32
if (alg == ALG_CRYPT) {
alg = ALG_APMD5;
fprintf(stderr, "Automatically using MD5 format on Windows.\n");
}
#endif
>How-To-Repeat:
On Windows:
htpasswd -d htpasswd userid
>Fix:
Instead of using ALG_CRYPT as the default (and testing for it as above), define
an ALG_UNDEF and only set the platform dependent default if the user hasn't
specified an algorithm.
>Audit-Trail:
>Unformatted:
[In order for any reply to be added to the PR database, you need]
[to include <[EMAIL PROTECTED]> in the Cc line and make sure the]
[subject line starts with the report component and number, with ]
[or without any 'Re:' prefixes (such as "general/1098:" or ]
["Re: general/1098:"). If the subject doesn't match this ]
[pattern, your message will be misfiled and ignored. The ]
["apbugs" address is not added to the Cc line of messages from ]
[the database automatically because of the potential for mail ]
[loops. If you do not include this Cc, your reply may be ig- ]
[nored unless you are responding to an explicit request from a ]
[developer. Reply only with text; DO NOT SEND ATTACHMENTS! ]
