Ubuntu Servers :: Apache Mod_auth Use Md5 Hashes?
May 24, 2010I'm trying to figure out if I can force apache's mod_auth to use md5 hashed passwords. Is this possible and if so, how is this set up?
View 3 RepliesI'm trying to figure out if I can force apache's mod_auth to use md5 hashed passwords. Is this possible and if so, how is this set up?
View 3 RepliesI have Webmin installed on an Ubuntu server. I currently have a successful apache server running on port 80, however I want to create a virtual host on port 81. When I try I go to servers->Apache Webserver-> Create Virtual Host I change the port to 81 and the document root to /var/port81www then I click create. How ever when I goto 192.168.1.5:81 (local ip, I know I have to port forward but its not even working local) it does not work.
View 5 Replies View RelatedI'm currently running tests on my SAM file on my XP partition. Partly because I want a password that is hard to crack, and also out of curiosity. While running John the Ripper (no options used) I'm noticing that there are 8 pasword hashes, yet only 4 users associated with WinXP. I know that JTR only does 7(?) characters when it check for a solution. Is the 8 hashes because it separates passwords longer than 7 into 2 hashes, and then cracks them individually as 2 parts? I did try googling this,
View 2 Replies View RelatedI'm trying to generate MD5 hashtext within gnome-terminal that will match that generated by PHP running on a live web server. However, when I hash the same text I get completely different results!
Code:
<?php md5('testing123') ?> ===> 7f2ababa423061c509f4923dd04b6cf1
bash$ echo 'testing123' | openssl md5 ===> bad9425ff652b1bd52b49720abecf0ba
Could this be a character set problem? My terminal is running UTF-8, but even if I change it to ISO-8859-1, the hashtext that's generated is the same. Also tried using md5sum with a text file, saved in various character encodings, but still got the same [wrong] hashtext. I'm running Ubuntu 9.10, tried running the local hash in both gnome-terminal 2.28.1 and the CTRL+ALT+F1 console.
The /etc/shadow file contains an id of $1$, $2$, $5$ or $6$ to show the encryption method used.A salt follows this,followed by the password hash.When a user is created and a password is set, a hash is RANDOMLY generated and used as the salt to the password hash. Everytime that user logs in, login checks /etc/shadow for the $id$ and salt and runs the password given by the user through the hash mechanism ($id$) using the salt in /etc/shadow.So basically does login look at /etc/shadow for the $id$ and salt to create a hash with which to compare to the /etc/shadow hash?question 2 - If my $id$ was $5$, which is sha256, how would i go about changing this? Like is there a shadow.conf or crypt.conf or something? Can i change it per user?
View 2 Replies View RelatedI have a hash of hashes and I need to sort this by value and write to a javascript array file..Currently I am using the following
foreach my $key(sort { keys %{$trans{$a}} <=> keys %{$trans{$b}}} keys %transmission)
{
foreach my $role(sort {$trans{$key}{$a} cmp $trans{$key}{$b}} keys %{$trans{$key}})
[code]...
I'm trying to figure out how to code for this specific type of instance - I want to use a hash and have the key be a reference to an array, and not use the key in the standard way of it being a scalar. Basically, I have a large output that I need to process line by line, and rather have access to it as an array than a big block in a scalar. For the big block hash as a scalar I would do -
Code:
foreach $CONTROLLER (<CONTROLLER_LIST>) {
$ALL_DISKS{$CONTROLLER} = `ssh -n <commands>`;
}
Now I know I could take the scalar and split it to another array after the fact like -
Code:
@TEMP_HOLD = split (/s+/,$ALL_DISKS{$CONTROLLER});
How would I code it that I would have access to the key information as an array and not a scalar? I know it needs to be a pointer and we're going to have -> in there somewhere, but not sure how to approach it. Some of the documentaiton I've been reading about referencing I've found a little confusing so far, and trying to figure out how to use them in context of what I'm working on.
where would i find the sha1/md5sum hashes for fedora14?
View 1 Replies View RelatedI wanted to write a script which would check the hash-sums of all files within a certain directory and compare them with previous hashes. I remembered that rkhunter does this by default for certain files. So my idea was to use rkhunter for this task. I copied the default configuration file and made some modifications to it. However, I just cannot get it to work. It always just computes the hashes for files in /bin /usr/bin etc. But I would like to also check the files, e.g. in /boot. Is there any way to configure rkhunter to compute and store hashes for *normal* (i.e. non-executable) files?
View 2 Replies View RelatedI have a file which looks something like this:
##########
some
text
text also includes empty lines
##########
some
more
text
##########
Basically all sections are separated by 10 hashes and I need to somehow only print all lines in the last section (the "some more text" part in the example above"). I tried all kind of things with sed and awk but I didn't find any way to identify the last "section".
I am in need of some syntax help. I'm trying to figure out how to store and retrieve an array out of a hash of hashes. For this example, I'm trying to access the city list for a particular state for a particular country. I understand I could do a join and split on the hash key to combine Country and State, but trying to keep things separated.The code I have gets in all the information for the Countries, and states, and gets the list of cities together, no problem. I store all the city names in an array, then make an anonymous pointer to the array for the hash, like this - $MY_CITIES{$COUNTRY}{$STATE} = [@CITIES]I believe that syntax is correct, or is it? What I'd like to do is I need to cycle through every hash to find if a city exists or not. If it exists in 3 states, then it should print 3 times. Here is the code block to search -
Code:
for $COUNTRY (@LIST_OF_COUNTRIES) {
for $STATE ( keys %MY_CITIES{$COUNTRY){$STATE} ) {
[code]...
I've been trying to write php or perl code to generate the sha-512 password hashes in fedora. I've been unable to do the hashing which is encoded in the shadow file on fedora core 11. Does anyone have php or perl code which provides the hashing algorithm. (All of my attempts result in the encrypted hashing being longer than 86 character -- the length that crypt says the sha-512 should be)
View 3 Replies View RelatedI've run into a problem and I don't know if it's apache or php or the combination of both. I can compile apache 2.2.15 just fine, but whenever I try to compile php 5.3.2 into my server, the first two steps work just fine but when I get to the make install part it shows the libphp5.so and it just stays there and I have to cancel the install because it won't finish.
View 5 Replies View Relatedjust switched our company from windows server to linux and everything is going good except we have 4 vpn connections though out the country coming to our server. All giving the client machines ip addresses of 192.168.x.x based on where they are located 192.168.1.x for the main location 192.168.2.x for a second location etc, and IIS could see the clients ip instead of the wan ip and was setup to block all ips except 192.168.x.x ip's and this worked great.
So i set up apache the same way, to allow only 192.168 ip's but i guess it doesn't work that way in apache for connections coming though vpn? 2 out of our 4 VPN connections are not static IP's, so the 2 that are I just add that ip to the allow list and that worked.But i don't think we should HAVE to get static ips for the other 2, that's one of the benefits of using VPN, especially if our old windows server didnt need it.Is there any way for apache to see the clients ip address for access or is there something somewhere else that needs changed for this?
I've got some strange looking requests in my access_log which I don't much like the look of. Can someone take a look and let me know if 1) it's possible for other people to use my server as a proxy, and 2) how I can stop them.
Code:
85.190.0.3 - - [06/Oct/2010:14:32:55 +0100] "CONNECT 213.92.8.7:31204 HTTP/1.0" 200 1606
85.190.0.3 - - [06/Oct/2010:14:32:55 +0100] "CONNECT 213.92.8.7:31204 HTTP/1.0" 200 1606
85.190.0.3 - - [06/Oct/2010:14:32:55 +0100] "GET http://vlad-tepes.bofh.it/proxy.txt HTTP/1.0" 404 1955
85.190.0.3 - - [06/Oct/2010:14:32:55 +0100] "GET http://vlad-tepes.bofh.it/proxy.txt HTTP/1.0" 404 1955
85.190.0.3 - - [06/Oct/2010:14:32:55 +0100] "CONNECT 213.92.8.7:31204 HTTP/1.0" 200 1606
[Code]...
My Server is 8.04 (hardy) and Apache is 2.2.8. I have been receiving emails from Apache each time a new stable release is available, most of which say you should install them due to security issues. The current stable release of apache being offered is 2.2.17
Q1) Do you recommend I upgrade from Apache 2.2.8 to 2.2.17?
Q2) Does this come automatically with my regular updates via Update Manager once the Ubuntu community thinks its stable enough (it appears that it doesn't)?
Q3) What is the best way to install the update?
Q4) Any concerns about installing it into a live environment? I don't have a development platform to try it in first.
When starting Apache I get this error in 10.10 (not in 9.10): [Fri Dec 03 21:14:22 2010] [error] (2)No such file or directory: could not open transfer log file /etc/apache2/${APACHE_LOG_DIR}/other_vhosts_access.log. Unable to open logs So where do I define APACHE_LOG_DIR ?
View 4 Replies View RelatedI'm looking to run some R scripts on a mysql database (engine =csv) from the apache webserver.
The goal is to record some statistics/numbers while someone is logged in, pass those numbers to r, run some statistics algorithms on the passed set of data and output an image file back to the logged-in user's html web page.
Doing this along with knowledge on how to call general r functions from within a php framework would be great.
I would like to add ROR to my web server, but I would still like to keep php. I tried doing this a few days ago, but it made my PHP unusable so that it would ask me to download a file rather than displaying the php page. how to install ruby on rails without trashing my system again.
View 3 Replies View RelatedI was wondering if anyone knows how to make a zone file for bind dns server that points "example.com" and all (by all i mean any) sub-domains to this 127.0.0.1 address. and i wanted to set up a virtual host in apache to use /var/www/eample/index.php for 'example.com' and all of its sub-domains.
View 1 Replies View RelatedCan anyone point me to a good apache GUI?
Ive read online about webmin, ebox etc but are there any others? I'm using gnome on my server and i did a search through the Ubuntu software Centre but nothing came up.
So here is my problem. I have websiteA.com and websiteB.com. I only have one public IP address. And websiteB needs to be constantly restarted, so both need to be on separate apache servers or instances.Virtual directories wont work cause I can only point websiteA to a directory /var/www/websiteA.Reverse proxy wont work cause I can only catch a sub directory.Proxy /websiteA/ URL...Does anyone know how I could get this to work in anyway.
View 4 Replies View RelatedIm trying to just set up my web page so it can be seen on my local home Lan (then Ill try to get it on the internet). I can see the site it on my pc but other network users cant.
They can ping my computer but cant telnet to it on port 6060 (thats the one is set the server up on)
What's wrong with my configuration its mostly the default with a few changes that I hoped would make the site work.
My ip 192.168.1.10
Here is the sites-available default file
Quote:
I have a virtual server setup on port 80 that works fine, however, if I change the port to, say, 8080 the browser then fails to connect.I'm using webmin to configure everything, all the other settings seem to work as I would expect.I get the error "Safari canī open the page http://192.168.0.12:8080 because Safari cant connect to the server 192.168.0.1." in safari, and i get something similar on the xubuntu machine in firefox connecting via localhost.It's almost as though theres a firewall in the way, but I think it's more likely to be some config problem.
View 2 Replies View RelatedI've setup a Ubuntu 9.10 LAMP server to host a word press blog on an intranet. I've got everything working except the url for the site.The IP address of the server will take me to the site URL.../But I'd rather use the server's name instead of the IP address URL...When i try to go to URL... in Firefox or IE it give me a server not found page and changes the URL to URL...I also have Webmin installed on the server and I've been playing around with the Apache module and can't figure out how to set it so i can use the server name instead of the IP address to get to the site.
View 6 Replies View RelatedI am running an apache server thru webmin, on a 8.04 install. Attempting to install awstats I have realized that access.log stopped writing some months ago. Went back thru the error logs and found I had deleted the virtual server, and started a new one. Everything else works fine, it never even occurred to me that logging would not also be restarted. I would just like to get it going again, any clues???
View 5 Replies View Relatedno matter what I do I cannot get my fresh install of apache to change off the default
Quote:
Originally Posted by apache
It works! This is the default web page for this server. The web server software is running but no content has been added, yet.
this is really annoying, my config file at /etc/apache2/apache2.conf is as follows (it is mainly the original with a few commented changes)
Code:
#
# Based upon the NCSA server configuration files originally by Rob McCool.
#
# This is the main Apache server configuration file. It contains the
[Code].....
how i can instal mysql,apache and php through my usb. what commands do i need?
View 2 Replies View RelatedWhen we run php scripts that move/rename/etc files, the script does not have access to write to files in our web root. Changing permissions to 777 fixes the problem, but obviously this is not an option..I've been reading up about suexec, phpsuexec, and suphp, but we can't seem to figure any of this out.In phpinfo(),the Server API reads: Server API Apache 2.0 Handlerbut on another server (where everything works, it reads : Server API CGI/FastCGIIs there ANY way to achieve this?
View 2 Replies View RelatedMy config:
Ubuntu 9.0.4 (all up to date with security patches)
Apache 2.2.11
MySQL version 5.0.75
PHP Version 5.2.6-3ubuntu4.5
I'm running Ubuntu as a Virtual machine with VMWare on top of a Windows 2008 Server. It has been working perfectly for nearly 9 months. I have one processor and 2GB of Ram assigned to the Virtual machine. Memory usage seldom ever reaches more than 50%, swapfile is hardly used either. I noticed recently that sites were loading very slow from time to time. Webmin showed me that USER / KERNEL were together using 100% cpu. I then started searching for answers to what was causing this and then read about using HTOP. I then installed HTOP and found that the following processes were the culprits
/usr/sbin/mysqld
/usr/sbin/apache2 -k start
There are multiple instances of mysqld and apache2 listed in HTOP, I assume this is because I run multiple sites on the box. It does however seem limited to only one or two PID's that are repeatedly maxing out the CPU at 100% (every 30 seconds to a minute) sometimes the CPU will stay maxed at 100% for nearly a minute and then free itself again but it is doing this continually. At the point when the CPU maxes out at 100% there will be one instance of mySQLD and one instance of Apache2 right at the top of HTOP and between the two they will be hogging 100% cpu. All the sites are either Wordpress or Joomla sites and I am quite confident it's one of these sites causing a problem.
My issue is that I cannot pin down which PID belongs to which site. Then, once I know which site it is how do I then trace what process / file inside that site is casuing the problem? I figured one of my busiest sites (wordpress) might be the culprit and I installed the W3 Total Cache plugin today but that has not helped this 100% cpu problem, so for all I know it might be another WP site on the box or even one of the Joomla sites. I've noticed that the TIME column on the one MYSQLD instance that maxes out is very long so it seems like Mysql is keeping some connection open or something?