Re: APACHE/PHP/MYSQL Password Hash
Monty Pyth wrote:
I have inherited a website to work on that users authenticate to
using a login and password from a login page. The server is FreeBSD
6.2 running APACHE/PHP/MYSQL. There is a MYSQL table that maintains
all of the users. The table has a users name and password. The
password is hashed and some examples are:
02SvtVJnRLzuQ
42jhVP6kxUBX6
Can anyone tell me what file I would look at to see what hash
algorithm is being used to store the passwords in the table? Any help
would be great.
If this is using Apache basic auth (mod_authn_dbd) then the passwords
will be stored using the old-style DES password hash. If the passwords
are managed from PHP, then it is anyone's guess as to how they are
stored.
The samples do provided look like old-style DES password hashes, but it's
not possible to be certain that's what they are just by looking at them.
See crypt(3) for the OS interface for generating password hashes. There
is an equivalent PHP function:
http://uk.php.net/manual/en/function.crypt.php
or you can play with perl to learn how it works:
% perl -le 'print crypt("password", "aa");'
aajfMKNH1hTm2
The 2nd argument is the salt, a randomly generated value used to ensure
that the same password encrypts to different hashes if used in different
accounts.
It's the same basic API that is used in the system password file,
but nowadays the salt is 6 characters rather than two, and there is
a choice of hashing function -- this uses MD5:
% perl -le 'print crypt("password", q{$1$aa$});'
$1$aa$FuYJ957Lgsw.eVsENqOok1
Cheers,
Matthew
PS. 42jhVP6kxUBX6 is a Googlewhack, or it was until I sent this message.
However one way of quickly decoding a password has is just to Google
for the crypt text -- no guarantees but surprisingly often you'll find
the answer for the old style DES hashes...
--
Dr Matthew J Seaman MA, D.Phil. 7 Priory Courtyard
Flat 3
PGP: http://www.infracaninophile.co.uk/pgpkey Ramsgate
Kent, CT11 9PW
signature.asc
Description: OpenPGP digital signature
Re: APACHE/PHP/MYSQL Password Hash
On Thu, Oct 29, 2009 at 8:52 PM, Monty Pyth wrote: > I have inherited a website to work on that users authenticate to using a > login and password from a login page. The server is FreeBSD 6.2 running > APACHE/PHP/MYSQL. There is a MYSQL table that maintains all of the users. The > table has a users name and password. The password is hashed and some examples > are: > > 02SvtVJnRLzuQ > 42jhVP6kxUBX6 > > Can anyone tell me what file I would look at to see what hash algorithm is > being used to store the passwords in the table? Any help would be great. > > > Looking in the website file that processes the login page. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
Re: APACHE/PHP/MYSQL Password Hash
Hi, > The password is hashed and some examples are: > > 02SvtVJnRLzuQ > 42jhVP6kxUBX6 > > Can anyone tell me what file I would look at to see what hash > algorithm is being used to store the passwords in the table? Any > help would be great. As a hint, to help make it easier to reply, where are the password stored? Where did you get the example above? Olivier ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
APACHE/PHP/MYSQL Password Hash
I have inherited a website to work on that users authenticate to using a login and password from a login page. The server is FreeBSD 6.2 running APACHE/PHP/MYSQL. There is a MYSQL table that maintains all of the users. The table has a users name and password. The password is hashed and some examples are: 02SvtVJnRLzuQ 42jhVP6kxUBX6 Can anyone tell me what file I would look at to see what hash algorithm is being used to store the passwords in the table? Any help would be great. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
Re: new install of fbsd with apache/php/mysql
You can switch ttys to view output of pkg_add to see any error messages.. or try using the Ports tree. T - Original Message - From: "Chip Wiegand" <[EMAIL PROTECTED]> To: "FreeBSD List" Sent: Thursday, March 17, 2005 10:06 AM Subject: new install of fbsd with apache/php/mysql I just finished installed 5.3 and am now trying to get apache2, php4, myql4 installed. I run sysinstall to install the packages from ftp. php4 installed, mysql-client installed, but apache2 and mysql-server failed. I get this message when I tried mysql4.1.5 - Add of package mysql-client-4.1.5 aborted, error code 1 - Please check the debug screen for more info Loading of dependent package mysql-client-4.1.5 failed and the same message when trying apache2.0.50_3. I don't know how to view the debug screen so can't provide any more info than those error messages. I just need those 3 apps - apache2, php4 and mysql4 on this box for web developement. Any suggestions? Chip ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]" ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
new install of fbsd with apache/php/mysql
I just finished installed 5.3 and am now trying to get apache2, php4, myql4 installed. I run sysinstall to install the packages from ftp. php4 installed, mysql-client installed, but apache2 and mysql-server failed. I get this message when I tried mysql4.1.5 - Add of package mysql-client-4.1.5 aborted, error code 1 - Please check the debug screen for more info Loading of dependent package mysql-client-4.1.5 failed and the same message when trying apache2.0.50_3. I don't know how to view the debug screen so can't provide any more info than those error messages. I just need those 3 apps - apache2, php4 and mysql4 on this box for web developement. Any suggestions? Chip ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: Is there a Complete "Package"(NOT Ports) for: [Apache+PHP+MySQL+Mod_SSL+Mod_Perl] ?? - newbie+3
Henrik W Lund wrote: DK wrote: Hi all, I just wanted to know if there is available anywhere a Complete "Package" that is Ready to Go for a FreeBSD Server imlementation that contains: Apache PHP MySQL Mod_SSL Mod_Perl ... & before anyone flames, yes I know you can just d/l the ports & compile from source! ... Thats not what I am looking for. Tried that & found it was too much messing around (compared to the equivalent on Windows 2000) Um, there is no equivalent on W2K, but I digress... One thing to remember is that Apache and mod_perl are usually run as two separate instances. You run static Apache off port 80, and dynamic Apache (hence +mod_perl) on port 8000 or whatever, and this is reverse-proxied back through the static server at port 80 (and 8000 is firewalled off from the outside). This results in big savings in memory. mod_perl processes can weigh 80Mb apiece, easily. Standard httpd processes weigh in at about 3Mb. You don't want to tie up an 80Mb process spoonfeeding some luser on a modem. Reverse proxying lets you have a large number of small static processes and only a handful of mod_perl processes. There are also a number of ways you can proxify the dynamic requests, so there's no one-size-fits-all. The easiest way is to do something like: ProxyPass/dyn http://localhost:8000/ ProxyPassReverse /dyn http://localhost:8000/ Then you have to decide who gets the https port. My advice would be let the static handle it. (--enable-ssl) Next, the question of MySQL. I expect you mean that PHP and/or mod_perl needs MySQL support. PHP configure will detect this automatically if you have it installed. In mod_perl, you'll probably want to attack it via Apache::DBI and DBD::Mysql. Finally, you can install mod_perl and PHP and DSO (i.e., loadable modules), after you have your basic installation up and running. (Just remember to --enable-so). The level of PHP processing you plan to do will indicate whether you should be running it directly out of port 80 or proxified from 8000. There are so many ways to put these pieces together, depending on your needs, that there is no simple package that puts them all together. I sympathise with your remark that it's so much easier under W2K. The trouble is, a well-tuned mod_perl installation will run rings around anything IIS/ASP can do, but that comes at a cost of knowing how to set it up. I would recommend investing in the mod_perl book by Stas Beckman and Eric Cholet. http://www.modperlbook.com/ Regards, David ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: Is there a Complete "Package"(NOT Ports) for: [Apache+PHP+MySQL+Mod_SSL+Mod_Perl] ?? - newbie+3
On Wed, Jul 28, 2004 at 09:09:49AM -0500, Dan Nelson wrote: > In the last episode (Jul 28), DK said: > > I just wanted to know if there is available anywhere a Complete "Package" > > that is Ready to Go for a FreeBSD Server imlementation that contains: > > > > Apache > > PHP > > MySQL > > Mod_SSL > > Mod_Perl > > $ pkg_add -r apache mysql-server php mod_perl > > mod_ssl doesn't seem to be a port, whatever it is. Unlike other apache mods, mod_ssl includes a bunch of patches to the base apache, so there isn't a separate mod_ssl port -- you'ld install the apache+mod_ssl package instead. That is if you want Apache-1.3.x. If you want Apache-2.0.x, then the mod_ssl functionality is bundled as one of the core modules. The apache2 package also comes with IPv6 support out of the box. In fact, all of those packages have multiple versions available in the ports tree -- your command line as is would need to be altered to select the appropriate versions of those servers. To the OP -- yes, that's more complicated than it might be, but the complexity is the flip side of flexibility and choice and the philosophy of giving you precise control over your computer. Cheers, Matthew -- Dr Matthew J Seaman MA, D.Phil. 26 The Paddocks Savill Way PGP: http://www.infracaninophile.co.uk/pgpkey Marlow Tel: +44 1628 476614 Bucks., SL7 1TH UK pgp6L2OhuS9Hi.pgp Description: PGP signature
Re: Is there a Complete "Package"(NOT Ports) for: [Apache+PHP+MySQL+Mod_SSL+Mod_Perl] ?? - newbie+3
In the last episode (Jul 28), DK said: > I just wanted to know if there is available anywhere a Complete "Package" > that is Ready to Go for a FreeBSD Server imlementation that contains: > > Apache > PHP > MySQL > Mod_SSL > Mod_Perl $ pkg_add -r apache mysql-server php mod_perl mod_ssl doesn't seem to be a port, whatever it is. -- Dan Nelson [EMAIL PROTECTED] ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: Is there a Complete "Package"(NOT Ports) for: [Apache+PHP+MySQL+Mod_SSL+Mod_Perl] ?? - newbie+3
DK wrote: Hi all, I just wanted to know if there is available anywhere a Complete "Package" that is Ready to Go for a FreeBSD Server imlementation that contains: Apache PHP MySQL Mod_SSL Mod_Perl ... & before anyone flames, yes I know you can just d/l the ports & compile from source! ... Thats not what I am looking for. Tried that & found it was too much messing around (compared to the equivalent on Windows 2000) Any suggestions/help is greatly appreciated :)) BTW: thanks to all who replied to my previous questions :)) Regards, DK Greetings! I don't think there exists such a package, but why don't make your own meta-port that depends on any package you want to install? In the same way the port x11/xorg doesn't install any files by itself, it depends on all packages that are needed to get a useable xorg configuration, the port you make will depend on anything you want! If you think that the configuration is really useful, commit the port, so that others in your present situation may take advantage of it. 1. Make a port, (misc/yourport), depending on Apache, MySQL, Mod_SSL, Mod_Perl, etc... 2. To install from package, run portinstall -P misc/yourport (this will build from source whenever a precompiled package doesn't exist). To learn how to make a port, read the Porter's Handbook at the FreeBSD website (I don't know how to make one, as I've never tried. It just struck me as being a good idea). Hope this helps! -Henrik W Lund ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: Is there a Complete "Package"(NOT Ports) for: [Apache+PHP+MySQL+Mod_SSL+Mod_Perl] ?? - newbie+3
AFAIK, no. There are several Linux-based packages that include several - though not all - of those components. Not that I've seen for FreeBSD. I'd seriously recommend a source install, especially with the mod_ssl and static mod_perl modules. In my experience there's just too much that usually gets muddled with package-based installs of these components, especially together. A good set of Linux-based instructions are here... http://lamps.efactory.de/e-archive.shtml Or, that's only 5 packages to install. Could just 5 five seperate pkg_adds, and hope for the best. - A http://www.moundalexis.com On Wed, 28 Jul 2004 00:34:11 -0700 (PDT), DK <[EMAIL PROTECTED]> wrote: > Hi all, > > I just wanted to know if there is available anywhere a Complete "Package" that is > Ready to > Go for a FreeBSD Server imlementation that contains: > > Apache > PHP > MySQL > Mod_SSL > Mod_Perl > > & before anyone flames, yes I know you can just d/l the ports & compile from > source! > > Thats not what I am looking for. Tried that & found it was too much messing > around > (compared to the equivalent on Windows 2000) > > Any suggestions/help is greatly appreciated :)) > BTW: thanks to all who replied to my previous questions :)) > > Regards, > DK ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Is there a Complete "Package"(NOT Ports) for: [Apache+PHP+MySQL+Mod_SSL+Mod_Perl] ?? - newbie+3
Hi all, I just wanted to know if there is available anywhere a Complete "Package" that is Ready to Go for a FreeBSD Server imlementation that contains: Apache PHP MySQL Mod_SSL Mod_Perl ... & before anyone flames, yes I know you can just d/l the ports & compile from source! ... Thats not what I am looking for. Tried that & found it was too much messing around (compared to the equivalent on Windows 2000) Any suggestions/help is greatly appreciated :)) BTW: thanks to all who replied to my previous questions :)) Regards, DK __ Do you Yahoo!? New and Improved Yahoo! Mail - Send 10MB messages! http://promotions.yahoo.com/new_mail ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: Apache php mysql
On Thu, May 27, 2004 at 03:28:31PM +0200, RazorOnFreeBSD wrote: > Hi everyone, > > I'd need some ressources to be sure how to install apache, php, mysql > on my FreeBSD box. This is the first time I do it, so I don't really > know how to configure the thing. I followed instructions from apache > and php to install those but it's not really easy for me to understand > how to install MySQL server from their website Apache and php > installations seemed to worked out fine but I surely have files to > configure now, but I don't know which ones... It would be great if > someone knows any ressource about all this setup online? For > information I have FreeBSD 4.9-STABLE, Apache 2.0.49, PHP 4.3.6, MySQL > 4.0.20. > > Thanks. > razor. Installing MySQL should be as easy: # cd /usr/ports/database/mysql40-server/ # make install This should automatically install the mysql-client as a dependency. There are lots of tutorials online about configuring Apache to work with PHP. Just do a few web searches for something like "apache php configure", or "apache php setup", or even just "apache php". Quickly, you'll need to add some lines like these to you httpd.conf file: LoadModule php4_module libexec/apache/libphp4.so AddType application/x-httpd-php .php These lines may not be exact for your setup. To test whether PHP is working create a file in your webroot (probably /usr/local/www/data) with only this in it: If PHP is working you'll get a pretty page back with a lot of information about PHP. Nathan pgplMePoECceH.pgp Description: PGP signature
Apache php mysql
Hi everyone, I'd need some ressources to be sure how to install apache, php, mysql on my FreeBSD box. This is the first time I do it, so I don't really know how to configure the thing. I followed instructions from apache and php to install those but it's not really easy for me to understand how to install MySQL server from their website Apache and php installations seemed to worked out fine but I surely have files to configure now, but I don't know which ones... It would be great if someone knows any ressource about all this setup online? For information I have FreeBSD 4.9-STABLE, Apache 2.0.49, PHP 4.3.6, MySQL 4.0.20. Thanks. razor. ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
