You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@httpd.apache.org by Milind Sawant <mi...@skandiabank.ch> on 2002/04/10 11:14:40 UTC
basic authentication in apache 1.3.19 ignoring more than 8 characters in the password.
Hi
The Basic Authentication in apache 1.3.19 is using only the first 8
characters
of the password for authentication.
any characters more than 8 characters in the password are ignored.
Is this the behaviour or can we configure apache 1.3.19 to use more than 8
characters
in the password for basic authentication?
let me know
thanks
Milind Sawant
Web Administrator (Apollo)
TCS
+0041 1 288 4675
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: basic authentication in apache 1.3.19 ignoring more than 8 characters in the password.
Posted by Chet Luther <ch...@rcn.com>.
Unfortunately, basic authentication just uses the standard UNIX crypt
function to create the password hashes. 8 characets is the limit. You may
want to check out mod_auth_digest for longer passwords.
> Hi
>
> The Basic Authentication in apache 1.3.19 is using only the first 8
> characters
> of the password for authentication.
> any characters more than 8 characters in the password are ignored.
>
> Is this the behaviour or can we configure apache 1.3.19 to use more than 8
> characters
> in the password for basic authentication?
>
> let me know
>
> thanks
>
> Milind Sawant
> Web Administrator (Apollo)
> TCS
>
> +0041 1 288 4675
>
>
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org