[SR-Users] Hashed Passwords

Ali Jawad ali.jawad at splendor.net
Tue Jan 3 12:28:13 CET 2012


Did trigger an email to fast this time, for people who might get here
using Google

modparam("auth_db", "calculate_ha1", yes)
should be
modparam("auth_db", "calculate_ha1", 0)

On Tue, Jan 3, 2012 at 1:03 PM, Ali Jawad <ali.jawad at splendor.net> wrote:
> Hi All
> We are using plain text passwords for authentication, for the obvious
> reasons we want to change to hashed passwords so first I executed the
> following on the SQL server :
>
> update subscriber set ha1 = md5(concat(username, ':', domain, ':',
> password)), ha1b = md5(concat(username, '@', domain, ':', domain, ':',
> password))
>
> The related config is :
>
>
>
> # ----- auth_db params -----
> #!ifdef WITH_AUTH
> modparam("auth_db", "db_url", DBURL)
> modparam("auth_db", "calculate_ha1", yes)
> modparam("auth_db", "password_column", "ha1")
> modparam("auth_db", "load_credentials", "")
> modparam("auth_db", "use_domain", MULTIDOMAIN)
>
> and
>
> # ----- auth_db params -----
> #!ifdef WITH_AUTH
> modparam("auth_db", "db_url", DBURL)
> modparam("auth_db", "calculate_ha1", yes)
> modparam("auth_db", "password_column", "ha1")
> modparam("auth_db", "load_credentials", "")
> modparam("auth_db", "use_domain", 1)
>
>
> But I keep getting unauthorized, what did I miss here.
>
> Regards



-- 
Ali Jawad
Information Systems Manager
Splendor Telecom (www.splendor.net)
Beirut, Lebanon
Phone: +9611373725/ext 116
FAX: +9611375554



More information about the sr-users mailing list