Go Back   HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials > ISPConfig 2 > General

Do you like HowtoForge? Please consider supporting us by becoming a subscriber.
Reply
 
Thread Tools Display Modes
  #1  
Old 7th September 2007, 21:16
Salvis Salvis is offline
Junior Member
 
Join Date: May 2006
Location: Riga, Latvia
Posts: 26
Thanks: 2
Thanked 0 Times in 0 Posts
Send a message via Skype™ to Salvis
Unhappy BUG: Partly typed passwords works

Hello!
I and my clients noticed that - partly typed passwords works for /stats/ directory and for FTP access.
Example:
Orginal password: Lainite9449270
User can log in to ftp and /stats/ directory just typing username and password: Lainite9 can access to his account. this not works for ispconfig login.
I tried to do something with password: p@55w0rd but unsuccesofully. Somewhere is little bug what allows gain access, but i can't notice where and how to fix it.
Reply With Quote
Sponsored Links
  #2  
Old 7th September 2007, 21:43
the_spy the_spy is offline
Member
 
Join Date: May 2007
Posts: 91
Thanks: 20
Thanked 6 Times in 6 Posts
 
Default

it's because the maximum password lenght recognized by unix crypt is 8 chars. You can search in the forum I think to see how to use md5 crypt with ispconfig
Reply With Quote
The Following User Says Thank You to the_spy For This Useful Post:
Salvis (8th September 2007)
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Clear Passwords Agosto Feature Requests 6 22nd March 2007 00:36


All times are GMT +2. The time now is 04:44.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.