The tag has no usage guidance.

learn more… | top users | synonyms

1
vote
1answer
16 views

How to know which files to specify exclusions for the installers of whitelisted apps using hashes with a Windows GPO?

To specify in the software restriction GPO, the hashes of executable/script files that are allowed to execute during the installation of a program run from, for example %LOCALAPPDATA%\Temp, during ...
0
votes
1answer
15 views

What is the exact Juniper and Cisco router per-packet balancing hash algorithm?

Due to JunOS and Cisco documentation there is ability to configure hashing algorithm choosing one of the next-hop from the several multiple equal-cost paths. There is information about fields that ...
0
votes
0answers
24 views

Custom algorithm for password hashing with vsftpd

Traditionally, when the client logs in, it sends the credentials (username+pw) without any further processing. The server then checks if an entry exists in its user database that matches the supplied ...
2
votes
1answer
30 views

Cloud-Config - Hashed Password Being Set Incorrectly

I'm provisioning an Ubuntu 14.04 server with Digital Ocean and am using Cloud-Config in the user data field to do some initial setup. The issue I am having is creating a new user and setting a ...
0
votes
1answer
54 views

rsync syncs too much files

I have the following directory structure: /tmp1 \_ file1.txt \_ file2.txt /tmp2 \_ file1.txt \_ file2.txt \_ file3.txt /changes With rsync's --compare-dest option, I want to sync all ...
1
vote
1answer
48 views

RKHunter report: “No hash value found”

I'm getting RKHunter warnings every day when my cron job runs the check. I'm on FreeBSD 10.2 This is the warning I'm getting: Warning: No hash value found for file '/usr/bin/perl' in the ...
0
votes
2answers
43 views

How can I distribute clients to servers evenly with hash_ip in Nginx as loadbalancer?

I know Nginx can use hash_ip to tie specific clients to a server. My question is when Nginx is hashing with client IP, does it distribute clients to servers evenly regardless of whatever client IP is ...
1
vote
0answers
271 views

How to use SHA-256 hashed (and salted) passwords from OpenLDAP in pam_ldap?

I have hashed and salted passwords in OpenLDAP for login via PAM in Linux. The setup works when the hashes are of type SHA-1 (salted or unsalted) or plain text. In these cases everything works fine ...
2
votes
1answer
95 views

What does AAA mean in nginx example of split_clients?

On nginx docs there is an example of split_clients directive: split_clients "${remote_addr}AAA" $variant { 0.5% .one; 2.0% .two; ...
0
votes
1answer
17 views

Logging or Auditing functionality for un/successful access to password hash files and other authentication files on Windows Server 2008 R2

I have been asked to find whether there is auditing enabled for one of our Windows Servers for accessing password hash files or other files used for authentication. Does anyone know if there is a ...
0
votes
1answer
262 views

(Zimbra)OpenLDAP SSHA512

So, our employees use the Zimbra OpenLDAP, however, since this doesnt include PosixAccount we cant automatically link it to our Synology. So my boss wanted me to create an OpenLDAP Database, and ...
1
vote
1answer
106 views

I switched my password hashing from md5 to ssha512, now exim4 won't accept smtp-logins

I have recently switched my password hashing from md5 to ssha512. This works fine with dovecot, so I can read incoming mail without problems. It does not work as well for exim4. Log output from ...
-1
votes
2answers
156 views

How to set specify encryption hash when creating Linux user? [closed]

I want to create a few Linux user on my computer to test JohnTheRipper against different kind of password (including length, charset and encryption hash method). How can I easily specify which hashing ...
0
votes
1answer
331 views

FCIV recursive verification on a xml file

Copying files folder to files_copy folder, one wants to check the files were copied correctly. Fciv.exe permits to make an xml database of the original files and then compare it to the copied ...
2
votes
1answer
321 views

W2012 R2 AD certificate Services sha algorithm

So shortly after configuring an offline root CA and online AD subordiante CA with SHA512 for future proofing. We discovered a thin client vender (teradici zero client with View 6) only supports SHA1 ...
1
vote
2answers
2k views

Thawte SSL123 SHA-2 Intermediate Certificate Chain, Broken?

I attempted to upgrade my one Web site, running nginx, from a SHA-1 SSL123 certificate to a SHA-2 one. Thawte's Web page with intermediate CAs has "RSA SHA-2 (under SHA-1 Root)" and "RSA SHA-2 ...
0
votes
1answer
57 views

After Updating to SHA2, private and public doesn't match

I've upgraded to SHA2 certificate, but after upgrading the new certificate key doesn't match my old private key. Public key has changed after updating and it doesn't match to previous private key. ...
3
votes
1answer
54 views

Should Chrome's SHA-1 match OpenSSL's?

If I compare the SHA-1 shown for the certificate for https://0000.jp in Chrome: 79 72 28 12 74 83 85 DE 3C B0 DE E7 A4 C3 14 BE B4 93 79 6E with that presented by OpenSSL: $ echo -n | openssl ...
-2
votes
1answer
229 views

Understanding linux /etc/shadow file structure (Linux) [closed]

Consider the following line taken from /etc/shadow file: root:$1$NFEf74q.$bmukkxAq9dOMJINgEtP7u0:15258:0::::: From this I understand that the hashing algorithm is md5 ($1) and starting from third $ ...
0
votes
1answer
124 views

How to generate Amazon Glacier SHA-256 Tree Hash for a file locally?

To verify my files have uploaded correctly, is there a tool to generate the Amazon Glacier Tree Hash SHA-256 for files locally?
2
votes
1answer
548 views

MySQL and SSL with -sha256

I'm trying to create some certificate to use with MySQL and everything works fine if I use the sha1 algorithm. If I add the -sha256 switch or -sha384 I can NOT connect to MySQL!. I get this error: ...
1
vote
0answers
202 views

Inconsistent data transfer throughout Ubuntu server causes system instability and data corruption [closed]

Update 2 We replaced the CPU, and all is good. It was a busted CPU! Update We replaced the motherboard, and are still getting the exact same problem. Does this mean it is a faulty CPU? What else ...
3
votes
1answer
3k views

SHA-2 signed SSL certificate crashes apache on startup on CentOS 5.X

In preparation of the warnings that are going to start showing up in browsers when visiting SSL sites with SHA1 signed certificates, I wanted to get all of the certs that I have upgraded. Some of ...
5
votes
2answers
10k views

Generating an SHA256 SSL CSR on CentOS/RHEL using genkey

The officially recommended method of generating a web server SSL certificate CSR (according to RHEL6 and CentOS 6 documentation) is to use the genkey utility. When used according to the docs, this ...
2
votes
0answers
77 views

Deprecation of RSA-SHA-1 in DKIM keys?

I recently noticed that opendkim on my mail server is objecting to DKIM signatures from a client, saying their key is insecure. It may be that that's due to lack of secure DNS (confirmation?) but I ...
1
vote
3answers
13k views

ESXi 5.5 NIC teaming for Load balancing using Cisco Etherchannel

I am using Cisco 3750G stacked switch configured with etherchannel and connected to ESXi Server configured with NIC teaming; Load balancing as router based on IP Hash. Cisco Switch configuration: ( ...
0
votes
1answer
360 views

KB968730 after Server 2003 SP2 already installed

Our company already has Server 2003 SP2 installed, and with it brought crypt32.dll version 5.131.3790.5014. We're still, however, having what I believe are SHA2 errors (see below). Some preliminary ...
8
votes
2answers
32k views

Enabling SHA2 Certificate Support on Windows Server 2003

A little background information first. I have an SSIS package that runs inside a Windows Server 2003 SP2 32 bit environment. The package recently started failing with the following error during a ...
2
votes
1answer
315 views

Pass a text file of MD5 Hashes into md5deep

I am using md5deep to try take a list of md5 hashes from a list of files (approximately 100,000 hashes) and I'm comparing them to the NSRL hash list (15gb text file). I'm trying to accomplish 1 ...
0
votes
2answers
928 views

RADIUS-sever: Hashing password before checking

I do have to set up a RADIUS server for authentication with a captive portal of pfSense. Unfortunately, all passwords in the RADIUS' database are hashed with a certain algorithm. I do use a ...
0
votes
2answers
871 views

Does openldap support pbkdf2 hash algorithm?

Since pbkdf2 (Password-Based Key Derivation Function 2) is a more secure hash function, so I wonder if current openldap implementation support pbkdf2 (pbkdf2_sha256 for example)? I have found some ...
3
votes
1answer
389 views

How to organize millions of static files to serve efficiently over the web?

I'd like to create a service to serve several hundred thousand smaller files (from 5kb to 500kb, mostly around 10-100kb). Think of it as a kind of gravatar.com which serves those little avatar pics on ...
2
votes
2answers
390 views

Couchdb attachment hashes don't match attachment content

While doing some auditing of a database, I found that some attachment content did not match the hashes given in the document's _attachments map. I tested this by downloading the document and ...
1
vote
0answers
167 views

ECDSA hash from OpenSSL command-line

Although it seems relatively easy to build an ECDSA hash programmatically, I've exhaustively searched for how to do it via command-line (in order to validate my results), and have found no examples of ...
4
votes
2answers
1k views

Do multiple Nginx servers load balance the same IP address to the same backend with the ip_hash directive?

I have two separate Nginx machines. The domain uses round-robin DNS and has two A records, one for each of the two frontend Nginx server. Both Nginx servers use the ip_hash directive and proxy ...
0
votes
1answer
229 views

update mysql passwords to new hash format without knowing the original passwords

I have a user who updated his sql connector to 6.6.5 and not he cannot run his code due to the passwords being hashed in the older format (pre 4.1?). I would like to update all of the mysql accounts ...
1
vote
2answers
74 views

Download and save a file with proof that it was downloaded from a specific server/url on a specific date?

Assuming the file was downloaded over http is this possible? I'm guessing there could be some way to do it using a hash and a timestamp however I'm not sure how you could prove nothing was tampered ...
1
vote
1answer
159 views

Correct procedure for RKHunter file changes

I run RKHunter on Ubuntu as well as as automated system / package updates. Last night I started receiving RKHunter warnings as listed below and whilst it's obviously easy for me to just do: rkhunter ...
2
votes
1answer
741 views

What password hash algorithm does each version of CentOS use by default?

I'm looking for a table of CentOS versions and corresponding default password hash algorithms. Google searches didn't reveal any matches that look like they have all the information in one place. ...
0
votes
1answer
763 views

Tools for compare huge number of files in two different server [closed]

I have question. Have you ever use any tools that can fast compare the identical of huge number of files (let's say thousands files with total size up to 15 GB) in two different windows 2003 server? I ...
0
votes
1answer
466 views

puppet manifest usage with hash

I'm struggling to get this to work and don't understand where I'm going wrong, can someone please guide me on how to correct? Basically I want to get an array in my nodes.pp, which is then used by my ...
0
votes
1answer
136 views

Use of hash in defined type for puppet

I'm trying to use a hash for the first time in puppet, so in my nodes.pp I'm going to use this: node test1.example.com { netset::int::vconf {"servers" : label1 => { 'comment' => ...
1
vote
0answers
73 views

Courier-imap (authlib) - supported hashes?

Which hashes are supported by courier-imap (or maybe its courier-authlib job?)? Ive tried passwords hashed with {SHA}, {SSHA} and {SSHA256}. Only first seems to work, but i need to use last one ...
0
votes
3answers
1k views

Monitoring folder diffs across servers with zabbix

Problem: I want to make sure that a certain folder is equal regarding it's contents across my servers. I do not want an automatic filesync to keep them equal, changing is done manually. My initial ...
1
vote
1answer
3k views

How are password encrypted in iRedMail?

I'm preparing new mail system with iRedMail. My developers needs info about how are hashes of password generated. I want to know how iRedMail generates hashes, is any salt used and what algorithm? I ...
6
votes
3answers
2k views

How are the hashes in /etc/shadow generated?

I was reading the Wikipedia article on the shadow file and it mentioned the format of the lines is like this: $id$salt$hashed So, my question is, how does it work? I tried to calcualte the hash ...
7
votes
1answer
2k views

Tool to compute SHA256 Tree Hash [closed]

I've started using AWS Glacier, and noticed that it hashes the files using an algorithm called SHA-256 Tree Hash. To my surprise, this algorithm is different from SHA-256, so I can't use the tools ...
0
votes
1answer
166 views

Is it possible to store Hashed data in a different field than userPassword in LDAP

I've been asked to store hashed data in a LDAP server. Putting hashed passwords is easy but I'm not sure if LDAP allows to store data like email hashed or even encrypted. Creating a LDIF file with a ...
1
vote
1answer
477 views

PBKDF2 (or BCrypt) hash implementation for Apache HTTPD or APR

Does anyone know of (simple) way to use PBKDF2 or BCrypt as a password hash within Apache HTTPD. The general scenario is that I have a resource in /private that I would like to restrict to a given ...
1
vote
3answers
166 views

Reset and then restore mysql password

I have linux root password. There's MySQL server on that machine. One of the site's ini was rewritten and now it can't reach the mysql database. I don't have mysql root to change the password for ...