Questions tagged [hash]
The hash tag has no usage guidance.
107
questions
0
votes
1
answer
70
views
pgcrypto and password hashing
I'm thinking about my choices regarding how to store passwords in Postgres.
One such option is to use pgcrypto. Reading their docs, I see that their crypt and gen_salt functions do not use sha256 but ...
0
votes
1
answer
350
views
How to overcome the Weaker MD4 hash issue with samba
We are using samba configuration on our RedHat(RHEL7.9) systems, where SMB authentication is based on a NTLM password hash which basically a clear-text credential
for a challenge-response ...
- 105
1
vote
1
answer
628
views
Windows Server 2012: how to prevent IIS from choosing SHA-1 for connections?
The problem: IIS on Windows 2012 picks SHA-1 algorithm when the client uses SHA-1 certificate. Even though the server-side certificate is SHA-256. So Chrome/Edge don't work.
On analogous Windows 2016 ...
- 249
0
votes
1
answer
77
views
How to instruct Postfix to block a specific Hash (to protect against a known IOC attack) of attached files or content?
an attack is ongoing and we want to block at the relay mail level, some Hashes (of attached files or even the email content) to be sent or received. I want to instruct postfix to reject mail with ...
- 1
1
vote
0
answers
1k
views
Can't change size of types_hash_max_size
Currently I'm trying to setup a nextcloud server with nginx. Now I've the following in my /etc/nginx/sites-available/nextcloud.conf:
server {
listen 443 ssl;
server_name localhost;
(...)
...
- 133
2
votes
3
answers
227
views
Is checking data integrity with hashes useful for my scenario?
I have a NAS as production system (mostly video footage and project files) and a 1:1 backup. I only need to retrieve the backup data in cases of emergency. Such a case didn't occur yet.
Lately I'm ...
- 21
0
votes
1
answer
780
views
Compute and update the md5 hash after the fact
So... I just realized that the utility I’ve been using to upload data to azure blobs has only been setting content-md5 hashes for the small files, leaving the larger (more important) files without a ...
1
vote
1
answer
143
views
Which EC2 Instance to hash a large amount of 25gb files
I have an EBS (elastic block storage) on AWS with large amount of 25GB files (1000). I would like to calculate a SHA256 sum for each file.
Which EC2 instance would be the best for such task (cpu ...
- 205
0
votes
1
answer
200
views
Unknown directive "hash" for nginx while using with $remote_addr
I have using ip_hash in nginx conf file but found the requests were always redirected to same server address. Found that using $remote_addr should help to resolve this but nginx gives error
2020/05/...
- 171
1
vote
0
answers
33
views
What hash function is used to cache credentials on Windows 10?
I am looking for the hash function used by Windows to cache user passwords locally on a computer. The client machine would run Windows 10. The AD Controller would run Windows Server 2016.
- 299
0
votes
0
answers
61
views
Modify OpenLDAP hashing algorithm [duplicate]
I have a CentOS7 Server running slapd 2.4.44 and I'd like to modify the default hashing algorithm being used. Instead of using SSHA, i'd like to use SHA-256 or SHA-512.
I've been having trouble ...
0
votes
1
answer
248
views
Openldap re-hashes already hashed password
I have an openldap with ppolicy on SSHA-512. When clear text password is sent from client, the password will be stored as SSHA-512, fine.
My problem appears, once already hashed password is send e.g ...
- 1
1
vote
1
answer
405
views
Templated dict keys in ansible YAML
I am trying to use a dict in an Ansible task, which is defined like this:
in vars/main.yml file:
username: user1
userpass: pass1
users:
"{{ username }}":
pass: "{{ userpass }}"
This doesn't ...
1
vote
0
answers
18
views
Is there a way to tell what image was used to deploy a machine from Windows Deployment Services?
Is there a way to tell what image was used to deploy a machine from Windows Deployment Services? Is there some sort of a hash that would identify a machine being deployed from a particular image?
- 4,787
1
vote
1
answer
649
views
haproxy tls hash algorithm
I'm using HAProxy 1.7.5 and openssl 1.1.0f (from Debian 9.5 stabel) to serve TLS connections.
Now there are clients offering SHA-384 and SHA-512 based signature algorithms in the client hello message. ...
2
votes
1
answer
6k
views
Set already hashed password for user against open ldap
Let me describe the infrastructure I am trying to configure. There is an opne ldap server on centOS (running slapd 2.4.40) as distributed authentication method for a couple of boxes.
Is there a way ...
- 23
0
votes
1
answer
3k
views
How to reset Ubiquiti UniFi Controller admin password?
I need to get into a Ubiquiti UniFi Controller system that was setup by one of my predecessors. The admin password has long since been lost and the company now uses a different Wi-Fi system at the ...
- 320
1
vote
1
answer
93
views
shasum returns an incorrect result
Calculating SHA256 gives me an incorrect result when I'm using "shasum":
$ echo "abcd" | shasum -a 256
fc4b5fd6816f75a7c81fc8eaa9499d6a299bd803397166e8c4cf9280b801d62c -
# or
$ echo abcd | shasum -...
- 11
0
votes
1
answer
1k
views
multiple sha1 file hashes conversion
Issue Description:
I'm trying to comply with our Security Advisories. The advisories contain nearly 1000 MD5 & Sha 256 file hashes. I need to convert them into sha1 and update them in our endpoint ...
0
votes
3
answers
1k
views
Can you set the number of rounds that ansible's password_hash jinja2 filter uses?
In ansible, it's pretty convenient to use something like this:
- name: Make sure user password is set
user:
name: my_user
password: "{{ user_password|password_hash('sha512', 'SomeSalt') }}"...
- 285
0
votes
0
answers
468
views
get SHA256 has of certificate chain of my certificate
I got my server certificate mycert.pem by command:
cho -n | openssl s_client -connect <my.server.hostname> | sed -ne '/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p' > mycert.pem.
I would like ...
- 121
0
votes
1
answer
629
views
Linux FTP server which can work with unsalted SHA256 hashes?
Problem
Some old WS_FTP server stopped booting at work after a Windows update. The corresponding admin is long gone. The only information I have is :
file structure
user names
unsalted SHA256 hash ...
- 101
0
votes
1
answer
30
views
compare 2 directories with different files names and locations of the files
I'm currently having 2 (top level) directories with a lot of sub directories and files.
There are a lot of duplicate files between those directories but there is one problem with it, the names of the ...
- 1
0
votes
1
answer
359
views
sendmail authentication with passwords in SHA512 hash
Is it possible for sendmail to authenticate users from LDAP with passwords stored as SHA512 hash ?
If yes, how?
Edit: OS is Arch Linux and i want to use only LDAP to authenticate users.
- 168
4
votes
3
answers
1k
views
How does "your new password must differ at least n characters from the previous" work when only hash codes are stored?
I am wondering how the password policy "your new password must differ at least n characters from your old password" works.
My understanding is that the OS never actually stores the old passwords ...
- 170
10
votes
3
answers
19k
views
Nginx: could not build map_hash, you should increase map_hash_bucket_size: 64
I need to use redirect map with quite a lot rules (2k+ lines, file size is ~200K)
I have the following settings in nginx:
map $uri $new_uri {
include /etc/nginx/conf.d/redirects.map;
}
...
- 2,055
0
votes
1
answer
991
views
Does any varnish using directors.hash() and hash.backend() always choose the same backend?
I have 2 varnish, each of them having 2 backends (same varnish versions -v4.x- and configuration file).
Incoming client connections are randomly distributed to any available varnish.
I need clients ...
- 2,826
11
votes
3
answers
3k
views
Windows 2012 R2 - Search for Files using MD5 Hash?
My organization recently discovered malware that was sent to some users via email that managed to get past our email security in a sophisticated, targeted attack. The names of the files vary from user ...
- 211
14
votes
1
answer
1k
views
Why isn't MacTripleDes algorithm output in PowerShell stable?
I am checking the file hashes using several different algorithms in powershell. When I use MacTripleDes, I always get different hashes. All of the others, such as SHA256 or MD5 always give reliable ...
- 176
0
votes
2
answers
2k
views
Secure link depending only on directory name?
I am currently struggling to make nginx secure just folder name, dependlessly what the file name inside of it is. Let's say, I'm accessing a file in a folder /one/two/three, it would look like this:
...
- 25
0
votes
1
answer
106
views
ansible hash summ of vaiables
Help please, the second day can not solve the problem.
I need to add checksum sha1 in file that is created from a template
Example:
{{ item.some_var1 | hash('sha1') }} - work fine
But when I'm trying ...
- 3
2
votes
1
answer
2k
views
CSP nginx nonce
I have some problems with adding CSP to my site. I configured Content-Security-Policy-Report-Only in my nginx configuration. And i get this.
adsbygoogle.js:37 [Report Only] Refused to apply inline ...
- 121
10
votes
7
answers
8k
views
How does one check huge files identity if hashing is CPU bound?
For small files hashing is just ok, but with huge ones you can easily find md5sum is CPU bound. Is there any hashing algorithm able to scale out on multiple cores? Any workarounds? Ideas? Anything? :)
- 9,132
0
votes
0
answers
336
views
How can I replicate Microsoft .NET manifest hashes, ideally on Linux command line?
I have a .NET click-once application which, I found out the hard way (user could not install), checks the checksums of its configuration files against checksums in the .exe.manifest as calculated at ...
- 141
1
vote
1
answer
58
views
How to know which files to specify exclusions for the installers of whitelisted apps using hashes with a Windows GPO?
To specify in the software restriction GPO, the hashes of executable/script files that are allowed to execute during the installation of a program run from, for example %LOCALAPPDATA%\Temp, during ...
- 4,787
0
votes
1
answer
122
views
What is the exact Juniper and Cisco router per-packet balancing hash algorithm?
Due to JunOS and Cisco documentation there is ability to configure hashing algorithm choosing one of the next-hop from the several multiple equal-cost paths. There is information about fields that ...
0
votes
1
answer
848
views
Custom algorithm for password hashing with vsftpd
Traditionally, when the client logs in, it sends the credentials (username+pw) without any further processing. The server then checks if an entry exists in its user database that matches the supplied ...
- 103
2
votes
1
answer
956
views
Cloud-Config - Hashed Password Being Set Incorrectly
I'm provisioning an Ubuntu 14.04 server with Digital Ocean and am using Cloud-Config in the user data field to do some initial setup. The issue I am having is creating a new user and setting a ...
- 31
0
votes
1
answer
165
views
rsync syncs too much files
I have the following directory structure:
/tmp1
\_ file1.txt
\_ file2.txt
/tmp2
\_ file1.txt
\_ file2.txt
\_ file3.txt
/changes
With rsync's --compare-dest option, I want to sync all ...
- 42
2
votes
1
answer
434
views
RKHunter report: "No hash value found"
I'm getting RKHunter warnings every day when my cron job runs the check.
I'm on FreeBSD 10.2
This is the warning I'm getting:
Warning: No hash value found for file '/usr/bin/perl' in the 'rkhunter....
- 313
1
vote
2
answers
823
views
How can I distribute clients to servers evenly with hash_ip in Nginx as loadbalancer?
I know Nginx can use hash_ip to tie specific clients to a server.
My question is when Nginx is hashing with client IP, does it distribute clients to servers evenly regardless of whatever client IP is ...
- 159
3
votes
1
answer
7k
views
How to use SHA-256 hashed (and salted) passwords from OpenLDAP in pam_ldap?
I have hashed and salted passwords in OpenLDAP for login via PAM in Linux. The setup works when the hashes are of type SHA-1 (salted or unsalted) or plain text. In these cases everything works fine ...
- 16.9k
6
votes
1
answer
2k
views
What does AAA mean in nginx example of split_clients?
On nginx docs there is an example of split_clients directive:
split_clients "${remote_addr}AAA" $variant {
0.5% .one;
2.0% .two;
...
- 266
0
votes
1
answer
24
views
Logging or Auditing functionality for un/successful access to password hash files and other authentication files on Windows Server 2008 R2
I have been asked to find whether there is auditing enabled for one of our Windows Servers for accessing password hash files or other files used for authentication.
Does anyone know if there is a ...
- 133
0
votes
1
answer
2k
views
(Zimbra)OpenLDAP SSHA512
So, our employees use the Zimbra OpenLDAP, however, since this doesnt include PosixAccount we cant automatically link it to our Synology.
So my boss wanted me to create an OpenLDAP Database, and ...
1
vote
1
answer
796
views
I switched my password hashing from md5 to ssha512, now exim4 won't accept smtp-logins
I have recently switched my password hashing from md5 to ssha512. This works fine with dovecot, so I can read incoming mail without problems.
It does not work as well for exim4.
Log output from ...
- 121
2
votes
2
answers
9k
views
How to set specify encryption hash when creating Linux user? [closed]
I want to create a few Linux user on my computer to test JohnTheRipper against different kind of password (including length, charset and encryption hash method). How can I easily specify which hashing ...
0
votes
1
answer
1k
views
FCIV recursive verification on a xml file
Copying files folder to files_copy folder, one wants to check the files were copied correctly. Fciv.exe permits to make an xml database of the original files and then compare it to the copied ...
- 125
2
votes
1
answer
738
views
W2012 R2 AD certificate Services sha algorithm
So shortly after configuring an offline root CA and online AD subordiante CA with SHA512 for future proofing. We discovered a thin client vender (teradici zero client with View 6) only supports SHA1 ...
- 33
1
vote
2
answers
3k
views
Thawte SSL123 SHA-2 Intermediate Certificate Chain, Broken?
I attempted to upgrade my one Web site, running nginx, from a SHA-1 SSL123 certificate to a SHA-2 one.
Thawte's Web page with intermediate CAs has "RSA SHA-2 (under SHA-1 Root)" and "RSA SHA-2 (...
- 121