[SR-Users] Hashed Passwords

Ali Jawad ali.jawad at splendor.net
Tue Jan 3 12:03:10 CET 2012


Hi All
We are using plain text passwords for authentication, for the obvious
reasons we want to change to hashed passwords so first I executed the
following on the SQL server :

update subscriber set ha1 = md5(concat(username, ':', domain, ':',
password)), ha1b = md5(concat(username, '@', domain, ':', domain, ':',
password))

The related config is :



# ----- auth_db params -----
#!ifdef WITH_AUTH
modparam("auth_db", "db_url", DBURL)
modparam("auth_db", "calculate_ha1", yes)
modparam("auth_db", "password_column", "ha1")
modparam("auth_db", "load_credentials", "")
modparam("auth_db", "use_domain", MULTIDOMAIN)

and

# ----- auth_db params -----
#!ifdef WITH_AUTH
modparam("auth_db", "db_url", DBURL)
modparam("auth_db", "calculate_ha1", yes)
modparam("auth_db", "password_column", "ha1")
modparam("auth_db", "load_credentials", "")
modparam("auth_db", "use_domain", 1)


But I keep getting unauthorized, what did I miss here.

Regards



More information about the sr-users mailing list