[GLLUG] Apache Authentication

[Dave Rogers]

I'm not an expert in the area of .htaccess, but you could write a python 
script that perused through the .htaccess file(s) (os.listdir()) and at 
worst called an external crypting program (using os.popen()) to process 
the plain text passwords into encrypted ones and then created new 
.htaccess file(s)...

I'm assuming its "standard" salt encryption....

I have some perl code that does that type of encryption as well as a 
Windows cygwin .exe program.  I have successfully integrated the latter 
into a python based website I wrote...crude, but effective.

Thomas Alan Hearn wrote:

> Hello fellow GLLUGers,
>  I have yet another question concerning apache.  This time my problem 
> is as follows.  I am transferring a website that used to be on a 
> windows apache server, and the login for the site was .htaccess and 
> http auth type login.  My problem is that the .htpasswd file was 
> stored with the passwords in plain text on the windows machine.  If I 
> remember correctly, i believe linux requires that .htpasswd files be 
> store encrypted?  My problem is that there are over 300 users on the 
> site and to manually change all those passwords would be horrible.  
> Anyone have any suggestions, and if not, know how to get about 
> encrypting the file?
> Thanks in advance,
> Cheers,
> Tom
> _______________________________________________
> linux-user mailing list
> linux-user at egr.msu.edu
> http://www.egr.msu.edu/mailman/listinfo/linux-user
>

-- 
Dave Rogers
DaveRogers at StockAlerts.com
http://StockAlerts.com