Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Is there any way for Apache to support SSHA passwords?

I have a couple of dozens of user passwords in an OpenLDAP server which are encrypted with SSHA (i.e. salted SHA1). No more users are to be added in the future, so I would like to move all credentials in a .htpasswd file for simplifying maintenance.

The problem is that Apache only supports unsalted (thus insecure) SHA1 passwords. Is there any mod to add support for SSHA passwords to Apache?

If a module specifically for this does not exist, could this functionality be achieved with mod-authnz-external and some external utility?

share|improve this question
    
Quick search showed this: github.com/DrGkill/htpasswd-ssha –  dawud Jun 11 '13 at 18:38
    
This could help in conjuction with mod-authnz-external, but requires some development and testing to implement the password checking functionality. I may give it a go if I don't find any out-of-the-box solution. –  m000 Jun 12 '13 at 11:45
    
Have you found a solution? –  coincoin Dec 9 '13 at 14:55
    
Unfortunatelly, I haven't. –  m000 Dec 9 '13 at 23:59
    
It totally depends of your setup, but isn't mod_authz_ldap an option? –  Mauricio López Mar 20 at 14:12

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.