Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Is there any way for Apache to support SSHA passwords?

I have a couple of dozens of user passwords in an OpenLDAP server which are encrypted with SSHA (i.e. salted SHA1). No more users are to be added in the future, so I would like to move all credentials in a .htpasswd file for simplifying maintenance.

The problem is that Apache only supports unsalted (thus insecure) SHA1 passwords. Is there any mod to add support for SSHA passwords to Apache?

If a module specifically for this does not exist, could this functionality be achieved with mod-authnz-external and some external utility?

share|improve this question
Quick search showed this: – dawud Jun 11 '13 at 18:38
This could help in conjuction with mod-authnz-external, but requires some development and testing to implement the password checking functionality. I may give it a go if I don't find any out-of-the-box solution. – m000 Jun 12 '13 at 11:45
Have you found a solution? – user130370 Dec 9 '13 at 14:55
Unfortunatelly, I haven't. – m000 Dec 9 '13 at 23:59
It totally depends of your setup, but isn't mod_authz_ldap an option? – Mauricio López Mar 20 '14 at 14:12

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.