The tag has no usage guidance.

learn more… | top users | synonyms

0
votes
1answer
46 views

rsync syncs too much files

I have the following directory structure: /tmp1 \_ file1.txt \_ file2.txt /tmp2 \_ file1.txt \_ file2.txt \_ file3.txt /changes With rsync's --compare-dest option, I want to sync all ...
1
vote
1answer
26 views

RKHunter report: “No hash value found”

I'm getting RKHunter warnings every day when my cron job runs the check. I'm on FreeBSD 10.2 This is the warning I'm getting: Warning: No hash value found for file '/usr/bin/perl' in the ...
0
votes
1answer
24 views

How can I distribute clients to servers evenly with hash_ip in Nginx as loadbalancer?

I know Nginx can use hash_ip to tie specific clients to a server. My question is when Nginx is hashing with client IP, does it distribute clients to servers evenly regardless of whatever client IP is ...
1
vote
0answers
115 views

How to use SHA-256 hashed (and salted) passwords from OpenLDAP in pam_ldap?

I have hashed and salted passwords in OpenLDAP for login via PAM in Linux. The setup works when the hashes are of type SHA-1 (salted or unsalted) or plain text. In these cases everything works fine ...
1
vote
1answer
38 views

What does AAA mean in nginx example of split_clients?

On nginx docs there is an example of split_clients directive: split_clients "${remote_addr}AAA" $variant { 0.5% .one; 2.0% .two; ...
0
votes
1answer
16 views

Logging or Auditing functionality for un/successful access to password hash files and other authentication files on Windows Server 2008 R2

I have been asked to find whether there is auditing enabled for one of our Windows Servers for accessing password hash files or other files used for authentication. Does anyone know if there is a ...
0
votes
1answer
206 views

(Zimbra)OpenLDAP SSHA512

So, our employees use the Zimbra OpenLDAP, however, since this doesnt include PosixAccount we cant automatically link it to our Synology. So my boss wanted me to create an OpenLDAP Database, and ...
1
vote
1answer
76 views

I switched my password hashing from md5 to ssha512, now exim4 won't accept smtp-logins

I have recently switched my password hashing from md5 to ssha512. This works fine with dovecot, so I can read incoming mail without problems. It does not work as well for exim4. Log output from ...
-1
votes
2answers
98 views

How to set specify encryption hash when creating Linux user? [closed]

I want to create a few Linux user on my computer to test JohnTheRipper against different kind of password (including length, charset and encryption hash method). How can I easily specify which hashing ...
0
votes
1answer
252 views

FCIV recursive verification on a xml file

Copying files folder to files_copy folder, one wants to check the files were copied correctly. Fciv.exe permits to make an xml database of the original files and then compare it to the copied ...
2
votes
1answer
278 views

W2012 R2 AD certificate Services sha algorithm

So shortly after configuring an offline root CA and online AD subordiante CA with SHA512 for future proofing. We discovered a thin client vender (teradici zero client with View 6) only supports SHA1 ...
1
vote
2answers
2k views

Thawte SSL123 SHA-2 Intermediate Certificate Chain, Broken?

I attempted to upgrade my one Web site, running nginx, from a SHA-1 SSL123 certificate to a SHA-2 one. Thawte's Web page with intermediate CAs has "RSA SHA-2 (under SHA-1 Root)" and "RSA SHA-2 ...
0
votes
1answer
55 views

After Updating to SHA2, private and public doesn't match

I've upgraded to SHA2 certificate, but after upgrading the new certificate key doesn't match my old private key. Public key has changed after updating and it doesn't match to previous private key. ...
3
votes
1answer
51 views

Should Chrome's SHA-1 match OpenSSL's?

If I compare the SHA-1 shown for the certificate for https://0000.jp in Chrome: 79 72 28 12 74 83 85 DE 3C B0 DE E7 A4 C3 14 BE B4 93 79 6E with that presented by OpenSSL: $ echo -n | openssl ...
-2
votes
1answer
211 views

Understanding linux /etc/shadow file structure (Linux) [closed]

Consider the following line taken from /etc/shadow file: root:$1$NFEf74q.$bmukkxAq9dOMJINgEtP7u0:15258:0::::: From this I understand that the hashing algorithm is md5 ($1) and starting from third $ ...
0
votes
1answer
111 views

How to generate Amazon Glacier SHA-256 Tree Hash for a file locally?

To verify my files have uploaded correctly, is there a tool to generate the Amazon Glacier Tree Hash SHA-256 for files locally?
2
votes
1answer
448 views

MySQL and SSL with -sha256

I'm trying to create some certificate to use with MySQL and everything works fine if I use the sha1 algorithm. If I add the -sha256 switch or -sha384 I can NOT connect to MySQL!. I get this error: ...
1
vote
0answers
184 views

Inconsistent data transfer throughout Ubuntu server causes system instability and data corruption [closed]

Update 2 We replaced the CPU, and all is good. It was a busted CPU! Update We replaced the motherboard, and are still getting the exact same problem. Does this mean it is a faulty CPU? What else ...
3
votes
1answer
3k views

SHA-2 signed SSL certificate crashes apache on startup on CentOS 5.X

In preparation of the warnings that are going to start showing up in browsers when visiting SSL sites with SHA1 signed certificates, I wanted to get all of the certs that I have upgraded. Some of ...
5
votes
2answers
9k views

Generating an SHA256 SSL CSR on CentOS/RHEL using genkey

The officially recommended method of generating a web server SSL certificate CSR (according to RHEL6 and CentOS 6 documentation) is to use the genkey utility. When used according to the docs, this ...
2
votes
0answers
64 views

Deprecation of RSA-SHA-1 in DKIM keys?

I recently noticed that opendkim on my mail server is objecting to DKIM signatures from a client, saying their key is insecure. It may be that that's due to lack of secure DNS (confirmation?) but I ...
1
vote
3answers
11k views

ESXi 5.5 NIC teaming for Load balancing using Cisco Etherchannel

I am using Cisco 3750G stacked switch configured with etherchannel and connected to ESXi Server configured with NIC teaming; Load balancing as router based on IP Hash. Cisco Switch configuration: ( ...
0
votes
1answer
336 views

KB968730 after Server 2003 SP2 already installed

Our company already has Server 2003 SP2 installed, and with it brought crypt32.dll version 5.131.3790.5014. We're still, however, having what I believe are SHA2 errors (see below). Some preliminary ...
8
votes
2answers
26k views

Enabling SHA2 Certificate Support on Windows Server 2003

A little background information first. I have an SSIS package that runs inside a Windows Server 2003 SP2 32 bit environment. The package recently started failing with the following error during a ...
2
votes
1answer
256 views

Pass a text file of MD5 Hashes into md5deep

I am using md5deep to try take a list of md5 hashes from a list of files (approximately 100,000 hashes) and I'm comparing them to the NSRL hash list (15gb text file). I'm trying to accomplish 1 ...
0
votes
2answers
750 views

RADIUS-sever: Hashing password before checking

I do have to set up a RADIUS server for authentication with a captive portal of pfSense. Unfortunately, all passwords in the RADIUS' database are hashed with a certain algorithm. I do use a ...
0
votes
2answers
777 views

Does openldap support pbkdf2 hash algorithm?

Since pbkdf2 (Password-Based Key Derivation Function 2) is a more secure hash function, so I wonder if current openldap implementation support pbkdf2 (pbkdf2_sha256 for example)? I have found some ...
3
votes
1answer
337 views

How to organize millions of static files to serve efficiently over the web?

I'd like to create a service to serve several hundred thousand smaller files (from 5kb to 500kb, mostly around 10-100kb). Think of it as a kind of gravatar.com which serves those little avatar pics on ...
2
votes
2answers
346 views

Couchdb attachment hashes don't match attachment content

While doing some auditing of a database, I found that some attachment content did not match the hashes given in the document's _attachments map. I tested this by downloading the document and ...
1
vote
0answers
161 views

ECDSA hash from OpenSSL command-line

Although it seems relatively easy to build an ECDSA hash programmatically, I've exhaustively searched for how to do it via command-line (in order to validate my results), and have found no examples of ...
4
votes
2answers
1k views

Do multiple Nginx servers load balance the same IP address to the same backend with the ip_hash directive?

I have two separate Nginx machines. The domain uses round-robin DNS and has two A records, one for each of the two frontend Nginx server. Both Nginx servers use the ip_hash directive and proxy ...
0
votes
1answer
205 views

update mysql passwords to new hash format without knowing the original passwords

I have a user who updated his sql connector to 6.6.5 and not he cannot run his code due to the passwords being hashed in the older format (pre 4.1?). I would like to update all of the mysql accounts ...
1
vote
2answers
71 views

Download and save a file with proof that it was downloaded from a specific server/url on a specific date?

Assuming the file was downloaded over http is this possible? I'm guessing there could be some way to do it using a hash and a timestamp however I'm not sure how you could prove nothing was tampered ...
1
vote
1answer
155 views

Correct procedure for RKHunter file changes

I run RKHunter on Ubuntu as well as as automated system / package updates. Last night I started receiving RKHunter warnings as listed below and whilst it's obviously easy for me to just do: rkhunter ...
2
votes
1answer
704 views

What password hash algorithm does each version of CentOS use by default?

I'm looking for a table of CentOS versions and corresponding default password hash algorithms. Google searches didn't reveal any matches that look like they have all the information in one place. ...
0
votes
1answer
678 views

Tools for compare huge number of files in two different server [closed]

I have question. Have you ever use any tools that can fast compare the identical of huge number of files (let's say thousands files with total size up to 15 GB) in two different windows 2003 server? I ...
0
votes
1answer
428 views

puppet manifest usage with hash

I'm struggling to get this to work and don't understand where I'm going wrong, can someone please guide me on how to correct? Basically I want to get an array in my nodes.pp, which is then used by my ...
0
votes
1answer
129 views

Use of hash in defined type for puppet

I'm trying to use a hash for the first time in puppet, so in my nodes.pp I'm going to use this: node test1.example.com { netset::int::vconf {"servers" : label1 => { 'comment' => ...
1
vote
0answers
70 views

Courier-imap (authlib) - supported hashes?

Which hashes are supported by courier-imap (or maybe its courier-authlib job?)? Ive tried passwords hashed with {SHA}, {SSHA} and {SSHA256}. Only first seems to work, but i need to use last one ...
0
votes
3answers
932 views

Monitoring folder diffs across servers with zabbix

Problem: I want to make sure that a certain folder is equal regarding it's contents across my servers. I do not want an automatic filesync to keep them equal, changing is done manually. My initial ...
1
vote
1answer
2k views

How are password encrypted in iRedMail?

I'm preparing new mail system with iRedMail. My developers needs info about how are hashes of password generated. I want to know how iRedMail generates hashes, is any salt used and what algorithm? I ...
5
votes
2answers
2k views

How are the hashes in /etc/shadow generated?

I was reading the Wikipedia article on the shadow file and it mentioned the format of the lines is like this: $id$salt$hashed So, my question is, how does it work? I tried to calcualte the hash ...
7
votes
1answer
1k views

Tool to compute SHA256 Tree Hash [closed]

I've started using AWS Glacier, and noticed that it hashes the files using an algorithm called SHA-256 Tree Hash. To my surprise, this algorithm is different from SHA-256, so I can't use the tools ...
0
votes
1answer
151 views

Is it possible to store Hashed data in a different field than userPassword in LDAP

I've been asked to store hashed data in a LDAP server. Putting hashed passwords is easy but I'm not sure if LDAP allows to store data like email hashed or even encrypted. Creating a LDIF file with a ...
1
vote
1answer
440 views

PBKDF2 (or BCrypt) hash implementation for Apache HTTPD or APR

Does anyone know of (simple) way to use PBKDF2 or BCrypt as a password hash within Apache HTTPD. The general scenario is that I have a resource in /private that I would like to restrict to a given ...
1
vote
3answers
159 views

Reset and then restore mysql password

I have linux root password. There's MySQL server on that machine. One of the site's ini was rewritten and now it can't reach the mysql database. I don't have mysql root to change the password for ...
5
votes
2answers
1k views

Why do some sites have a TXT record with only a base64 hash code? [closed]

What is the purpose of the TXT record in (for example) the root Microsoft.com zone? I don't see any reasonable tie into SPF, SenderID, DomainKeys, or even TLS-OBC or DANE for TLS. microsoft.com IN ...
0
votes
2answers
2k views

Change password hashing algorithm for SuSE users from blowfish to MD5

I have a network of roughly 1000 SuSE machines with 20-200 users on each. The password hashing algorithm used is the default i.e. blowfish. In order to check, whether a user has used a dictionary word ...
3
votes
2answers
3k views

changing shadow hash algorithm to bcrypt: how to rehash

I want to change my SHA512 shadow file to use bcrypt as shown in this question/answer: Enable blowfish-based hash support for crypt The problem is that i run into a chicken and egg problem, because ...
2
votes
1answer
165 views

Apache send HTML without comments

I have a problem with my Apache Webserver, I got 2 environments: Development and Production. Both have the same configuration, but the first one sends the HTMLs exactly as they've been created, the ...