encrypted passwords

[cleansedbb]

this is probably something simple that i forgot to configure but my passowrds only work in plain text???

I'm using apache 1.3.23 on 2k, active perl 5.6, php4.1

now I changed the httpd.conf to use say pword.pwd file for passwords, htaccess doesnt seem to work either so I've been hard coding the dir in the httpd.conf as well *site rarely changes so doesnt bother me to change it there. but would love htaccess to work as well.

I set say /protected/ folder up for password only set pword.pwd file with userass

thats the only way i can get it to work. I had account manager installed and when it would make passwords it woudl encrypt them MD5 but for some reason when I logged in it would request the exact password (md5 encrypted) instead of what I typed in. so basicaly it's doing plain text instead of decrypting the password.

any fix for this? or am I outta luck. I dont want to use IIS for apparent reasons.

TIA

 

[ifincham]

Hi,



Not certain the syntax is the same on win32 but on linux / unix you create an authfile like this :



htpasswd -c /var/

http://www/auth/userfile

user1



(prompts for password)



The '-c' creates a new file so subsequently you add users without the '-c' :



htpasswd /var/

http://www/auth/userfile

user2





Then you add statements to your <Directory> container in httpd.conf or .htaccess file :



<Directory &quot;/var/

http://www/html/whatever/&quot;>

AuthName &quot;My Auth test&quot;

AuthType Basic

AuthUserFile /var/

http://www/auth/userfile

require valid-user

</Directory>





Obviously for W2k you'd use windows type paths but otherwise it should be the same. The AuthUserFile points at the password file you maintained with 'htaccess'.



Hope this helps