You are viewing a plain text version of this content. The canonical link for it is here.
Posted to server-user@james.apache.org by Vincenzo Gianferrari Pini <vi...@praxis.it> on 2003/03/01 14:04:11 UTC

RE: Password encryption algorithm.

Javier,

I am answering you back through the list.

It looks like your linux md5 digested passwords are already in base-64 (the
BigInteger(x, 16) constructor builds from base-16, that's why you get the
exception), so no transformation should be done. Just use them directly. I
need all the transformation because my md5 digests were in hexadecimal
(base-16).

One thing though: my strings were *not* "linux passwords", so I'm not
familiar with them; are you sure that they are md5 digests of the user
passwords (somebody in this list could confirm it, or tell something more
about)? They seem too long to be an md5 digest in base-64. Anyhow, you need
to truncate them to 20 characters, as James wants them that way.

Bye,

Vincenzo

> -----Original Message-----
> From: Javier Storni [mailto:javier@512konline.com.ar]
> Sent: venerdì 28 febbraio 2003 18.08
> To: Vincenzo Gianferrari Pini
> Subject: Re: Password encryption algorithm attachments
>
>
> Vicenzo,
>
> I testing the code that you send me, and I have a problem with my Linux
> passwords.
>
> For example: $1$46359428$xcdb7Q1cWQAwdyDNjQRy81
>
> When I send that password as an argument to Bigdecimal( <String>,
> <int>), I
> get an exception:
>
> Exception in thread "main" java.lang.NumberFormatException: For input
> string: "$1$Ich"
>
> I must make a preprocessing  for each password, before convert them to
> base64. Right ?
>
> Your code:
>
> *********************************************
>
> public String getPwdHash() {
>
> if (getPwdHashHex() == null) {
>
> return null;
>
> }
>
>
> BigInteger bigInteger = new BigInteger(   getPwdHashHex() <-- This is the
> problem  , 16);
>
> *******************************************
>
> Thanks.
>
> Javier Storni
>
>
> ----- Original Message -----
> From: "Vincenzo Gianferrari Pini" <vi...@praxis.it>
> To: "Javier Storni" <ja...@512konline.com.ar>
> Sent: Thursday, February 27, 2003 12:01 PM
> Subject: RE: Password encryption algorithm attachments
>
>
> > I don't know why they don't get through.
> >
> > I will send you the attachments directly.
> >
> > Let me know.
> >
> > Bye,
> >
> > Vincenzo
> >
> > > -----Original Message-----
> > > From: Javier Storni [mailto:javier@512konline.com.ar]
> > > Sent: giovedì 27 febbraio 2003 15.55
> > > To: Vincenzo Gianferrari Pini
> > > Subject: Re: Password encryption algorithm attachments
> > >
> > >
> > > Vicenzo,
> > >
> > > I didn't got the attachet file in last message.
> > > Could you send me again ?
> > >
> > > Thanks a lot, again.
> > >
> > > Javier
> > >
> > > ----- Original Message -----
> > > From: "Vincenzo Gianferrari Pini" <vi...@praxis.it>
> > > To: <ja...@512konline.com.ar>
> > > Sent: Thursday, February 27, 2003 11:50 AM
> > > Subject: Password encryption algorithm attachments
> > >
> > >
> > > > Javier, did you receive the attachments? In the message bounced
> > > back from
> > > > the list the attachments were missing. Please let me know.
> > > >
> > > > Vincenzo
> > > >
> > >
> >
>


---------------------------------------------------------------------
To unsubscribe, e-mail: james-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: james-user-help@jakarta.apache.org


Re: Password encryption algorithm.

Posted by bill parducci <bi...@parducci.net>.
doesn't md5 use a salt?

b

Javier Storni wrote:
> Hi Vincenzo,
> 
> I've exported my Linux passwords to James, setting pwdAlgorithm to MD5.
> But doesn't works ....
> 
> If anyone did that (export Linux passwords to James user table (JDBC)), cand
> send me some hints ?
> 
> Thanks in advance.
> 
> Javier Storni


---------------------------------------------------------------------
To unsubscribe, e-mail: james-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: james-user-help@jakarta.apache.org


Re: Password encryption algorithm.

Posted by Javier Storni <ja...@512konline.com.ar>.
Hi Vincenzo,

I've exported my Linux passwords to James, setting pwdAlgorithm to MD5.
But doesn't works ....

If anyone did that (export Linux passwords to James user table (JDBC)), cand
send me some hints ?

Thanks in advance.

Javier Storni


----- Original Message -----
From: "Vincenzo Gianferrari Pini" <vi...@praxis.it>
To: "James Users List" <ja...@jakarta.apache.org>
Sent: Saturday, March 01, 2003 10:04 AM
Subject: RE: Password encryption algorithm.


> Javier,
>
> I am answering you back through the list.
>
> It looks like your linux md5 digested passwords are already in base-64
(the
> BigInteger(x, 16) constructor builds from base-16, that's why you get the
> exception), so no transformation should be done. Just use them directly. I
> need all the transformation because my md5 digests were in hexadecimal
> (base-16).
>
> One thing though: my strings were *not* "linux passwords", so I'm not
> familiar with them; are you sure that they are md5 digests of the user
> passwords (somebody in this list could confirm it, or tell something more
> about)? They seem too long to be an md5 digest in base-64. Anyhow, you
need
> to truncate them to 20 characters, as James wants them that way.
>
> Bye,
>
> Vincenzo
>
> > -----Original Message-----
> > From: Javier Storni [mailto:javier@512konline.com.ar]
> > Sent: venerdì 28 febbraio 2003 18.08
> > To: Vincenzo Gianferrari Pini
> > Subject: Re: Password encryption algorithm attachments
> >
> >
> > Vicenzo,
> >
> > I testing the code that you send me, and I have a problem with my Linux
> > passwords.
> >
> > For example: $1$46359428$xcdb7Q1cWQAwdyDNjQRy81
> >
> > When I send that password as an argument to Bigdecimal( <String>,
> > <int>), I
> > get an exception:
> >
> > Exception in thread "main" java.lang.NumberFormatException: For input
> > string: "$1$Ich"
> >
> > I must make a preprocessing  for each password, before convert them to
> > base64. Right ?
> >
> > Your code:
> >
> > *********************************************
> >
> > public String getPwdHash() {
> >
> > if (getPwdHashHex() == null) {
> >
> > return null;
> >
> > }
> >
> >
> > BigInteger bigInteger = new BigInteger(   getPwdHashHex() <-- This is
the
> > problem  , 16);
> >
> > *******************************************
> >
> > Thanks.
> >
> > Javier Storni
> >
> >
> > ----- Original Message -----
> > From: "Vincenzo Gianferrari Pini" <vi...@praxis.it>
> > To: "Javier Storni" <ja...@512konline.com.ar>
> > Sent: Thursday, February 27, 2003 12:01 PM
> > Subject: RE: Password encryption algorithm attachments
> >
> >
> > > I don't know why they don't get through.
> > >
> > > I will send you the attachments directly.
> > >
> > > Let me know.
> > >
> > > Bye,
> > >
> > > Vincenzo
> > >
> > > > -----Original Message-----
> > > > From: Javier Storni [mailto:javier@512konline.com.ar]
> > > > Sent: giovedì 27 febbraio 2003 15.55
> > > > To: Vincenzo Gianferrari Pini
> > > > Subject: Re: Password encryption algorithm attachments
> > > >
> > > >
> > > > Vicenzo,
> > > >
> > > > I didn't got the attachet file in last message.
> > > > Could you send me again ?
> > > >
> > > > Thanks a lot, again.
> > > >
> > > > Javier
> > > >
> > > > ----- Original Message -----
> > > > From: "Vincenzo Gianferrari Pini"
<vi...@praxis.it>
> > > > To: <ja...@512konline.com.ar>
> > > > Sent: Thursday, February 27, 2003 11:50 AM
> > > > Subject: Password encryption algorithm attachments
> > > >
> > > >
> > > > > Javier, did you receive the attachments? In the message bounced
> > > > back from
> > > > > the list the attachments were missing. Please let me know.
> > > > >
> > > > > Vincenzo
> > > > >
> > > >
> > >
> >
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: james-user-unsubscribe@jakarta.apache.org
> For additional commands, e-mail: james-user-help@jakarta.apache.org
>


---------------------------------------------------------------------
To unsubscribe, e-mail: james-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: james-user-help@jakarta.apache.org