Questions tagged [hash]
The hash tag has no usage guidance.
100
questions
0
votes
0answers
12 views
OpenVPN authentication (mysql) with password hashed with pbkdf2_sha256
I've actually posed this question on stack exchange too, but I'd like to see what the server experts out there have to say about my problem.
I'm currently working on a Django project (academic). This ...
0
votes
1answer
15 views
Unknown directive “hash” for nginx while using with $remote_addr
I have using ip_hash in nginx conf file but found the requests were always redirected to same server address. Found that using $remote_addr should help to resolve this but nginx gives error
2020/05/...
1
vote
0answers
20 views
What hash function is used to cache credentials on Windows 10?
I am looking for the hash function used by Windows to cache user passwords locally on a computer. The client machine would run Windows 10. The AD Controller would run Windows Server 2016.
0
votes
0answers
42 views
Modify OpenLDAP hashing algorithm [duplicate]
I have a CentOS7 Server running slapd 2.4.44 and I'd like to modify the default hashing algorithm being used. Instead of using SSHA, i'd like to use SHA-256 or SHA-512.
I've been having trouble ...
0
votes
1answer
86 views
Openldap re-hashes already hashed password
I have an openldap with ppolicy on SSHA-512. When clear text password is sent from client, the password will be stored as SSHA-512, fine.
My problem appears, once already hashed password is send e.g ...
1
vote
1answer
14 views
Templated dict keys in ansible YAML
I am trying to use a dict in an Ansible task, which is defined like this:
in vars/main.yml file:
username: user1
userpass: pass1
users:
"{{ username }}":
pass: "{{ userpass }}"
This doesn't ...
1
vote
0answers
17 views
Is there a way to tell what image was used to deploy a machine from Windows Deployment Services?
Is there a way to tell what image was used to deploy a machine from Windows Deployment Services? Is there some sort of a hash that would identify a machine being deployed from a particular image?
1
vote
1answer
259 views
haproxy tls hash algorithm
I'm using HAProxy 1.7.5 and openssl 1.1.0f (from Debian 9.5 stabel) to serve TLS connections.
Now there are clients offering SHA-384 and SHA-512 based signature algorithms in the client hello message. ...
0
votes
1answer
1k views
Set already hashed password for user against open ldap
Let me describe the infrastructure I am trying to configure. There is an opne ldap server on centOS (running slapd 2.4.40) as distributed authentication method for a couple of boxes.
Is there a way ...
0
votes
1answer
1k views
How to reset Ubiquiti UniFi Controller admin password?
I need to get into a Ubiquiti UniFi Controller system that was setup by one of my predecessors. The admin password has long since been lost and the company now uses a different Wi-Fi system at the ...
1
vote
1answer
47 views
shasum returns an incorrect result
Calculating SHA256 gives me an incorrect result when I'm using "shasum":
$ echo "abcd" | shasum -a 256
fc4b5fd6816f75a7c81fc8eaa9499d6a299bd803397166e8c4cf9280b801d62c -
# or
$ echo abcd | shasum -...
0
votes
1answer
590 views
multiple sha1 file hashes conversion
Issue Description:
I'm trying to comply with our Security Advisories. The advisories contain nearly 1000 MD5 & Sha 256 file hashes. I need to convert them into sha1 and update them in our endpoint ...
0
votes
3answers
992 views
Can you set the number of rounds that ansible's password_hash jinja2 filter uses?
In ansible, it's pretty convenient to use something like this:
- name: Make sure user password is set
user:
name: my_user
password: "{{ user_password|password_hash('sha512', 'SomeSalt') }}"...
0
votes
0answers
328 views
get SHA256 has of certificate chain of my certificate
I got my server certificate mycert.pem by command:
cho -n | openssl s_client -connect <my.server.hostname> | sed -ne '/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p' > mycert.pem.
I would like ...
0
votes
1answer
506 views
Linux FTP server which can work with unsalted SHA256 hashes?
Problem
Some old WS_FTP server stopped booting at work after a Windows update. The corresponding admin is long gone. The only information I have is :
file structure
user names
unsalted SHA256 hash ...
0
votes
1answer
20 views
compare 2 directories with different files names and locations of the files
I'm currently having 2 (top level) directories with a lot of sub directories and files.
There are a lot of duplicate files between those directories but there is one problem with it, the names of the ...
0
votes
1answer
252 views
sendmail authentication with passwords in SHA512 hash
Is it possible for sendmail to authenticate users from LDAP with passwords stored as SHA512 hash ?
If yes, how?
Edit: OS is Arch Linux and i want to use only LDAP to authenticate users.
4
votes
3answers
702 views
How does “your new password must differ at least n characters from the previous” work when only hash codes are stored?
I am wondering how the password policy "your new password must differ at least n characters from your old password" works.
My understanding is that the OS never actually stores the old passwords ...
5
votes
3answers
10k views
Nginx: could not build map_hash, you should increase map_hash_bucket_size: 64
I need to use redirect map with quite a lot rules (2k+ lines, file size is ~200K)
I have the following settings in nginx:
map $uri $new_uri {
include /etc/nginx/conf.d/redirects.map;
}
...
0
votes
1answer
674 views
Does any varnish using directors.hash() and hash.backend() always choose the same backend?
I have 2 varnish, each of them having 2 backends (same varnish versions -v4.x- and configuration file).
Incoming client connections are randomly distributed to any available varnish.
I need clients ...
11
votes
3answers
2k views
Windows 2012 R2 - Search for Files using MD5 Hash?
My organization recently discovered malware that was sent to some users via email that managed to get past our email security in a sophisticated, targeted attack. The names of the files vary from user ...
14
votes
1answer
1k views
Why isn't MacTripleDes algorithm output in PowerShell stable?
I am checking the file hashes using several different algorithms in powershell. When I use MacTripleDes, I always get different hashes. All of the others, such as SHA256 or MD5 always give reliable ...
0
votes
2answers
1k views
Secure link depending only on directory name?
I am currently struggling to make nginx secure just folder name, dependlessly what the file name inside of it is. Let's say, I'm accessing a file in a folder /one/two/three, it would look like this:
...
0
votes
1answer
68 views
ansible hash summ of vaiables
Help please, the second day can not solve the problem.
I need to add checksum sha1 in file that is created from a template
Example:
{{ item.some_var1 | hash('sha1') }} - work fine
But when I'm trying ...
2
votes
1answer
1k views
CSP nginx nonce
I have some problems with adding CSP to my site. I configured Content-Security-Policy-Report-Only in my nginx configuration. And i get this.
adsbygoogle.js:37 [Report Only] Refused to apply inline ...
8
votes
7answers
4k views
How does one check huge files identity if hashing is CPU bound?
For small files hashing is just ok, but with huge ones you can easily find md5sum is CPU bound. Is there any hashing algorithm able to scale out on multiple cores? Any workarounds? Ideas? Anything? :)
0
votes
0answers
238 views
How can I replicate Microsoft .NET manifest hashes, ideally on Linux command line?
I have a .NET click-once application which, I found out the hard way (user could not install), checks the checksums of its configuration files against checksums in the .exe.manifest as calculated at ...
1
vote
1answer
55 views
How to know which files to specify exclusions for the installers of whitelisted apps using hashes with a Windows GPO?
To specify in the software restriction GPO, the hashes of executable/script files that are allowed to execute during the installation of a program run from, for example %LOCALAPPDATA%\Temp, during ...
0
votes
1answer
106 views
What is the exact Juniper and Cisco router per-packet balancing hash algorithm?
Due to JunOS and Cisco documentation there is ability to configure hashing algorithm choosing one of the next-hop from the several multiple equal-cost paths. There is information about fields that ...
0
votes
1answer
597 views
Custom algorithm for password hashing with vsftpd
Traditionally, when the client logs in, it sends the credentials (username+pw) without any further processing. The server then checks if an entry exists in its user database that matches the supplied ...
2
votes
1answer
540 views
Cloud-Config - Hashed Password Being Set Incorrectly
I'm provisioning an Ubuntu 14.04 server with Digital Ocean and am using Cloud-Config in the user data field to do some initial setup. The issue I am having is creating a new user and setting a ...
0
votes
1answer
129 views
rsync syncs too much files
I have the following directory structure:
/tmp1
\_ file1.txt
\_ file2.txt
/tmp2
\_ file1.txt
\_ file2.txt
\_ file3.txt
/changes
With rsync's --compare-dest option, I want to sync all ...
1
vote
1answer
299 views
RKHunter report: “No hash value found”
I'm getting RKHunter warnings every day when my cron job runs the check.
I'm on FreeBSD 10.2
This is the warning I'm getting:
Warning: No hash value found for file '/usr/bin/perl' in the 'rkhunter....
1
vote
2answers
667 views
How can I distribute clients to servers evenly with hash_ip in Nginx as loadbalancer?
I know Nginx can use hash_ip to tie specific clients to a server.
My question is when Nginx is hashing with client IP, does it distribute clients to servers evenly regardless of whatever client IP is ...
3
votes
1answer
6k views
How to use SHA-256 hashed (and salted) passwords from OpenLDAP in pam_ldap?
I have hashed and salted passwords in OpenLDAP for login via PAM in Linux. The setup works when the hashes are of type SHA-1 (salted or unsalted) or plain text. In these cases everything works fine ...
5
votes
1answer
1k views
What does AAA mean in nginx example of split_clients?
On nginx docs there is an example of split_clients directive:
split_clients "${remote_addr}AAA" $variant {
0.5% .one;
2.0% .two;
...
0
votes
1answer
22 views
Logging or Auditing functionality for un/successful access to password hash files and other authentication files on Windows Server 2008 R2
I have been asked to find whether there is auditing enabled for one of our Windows Servers for accessing password hash files or other files used for authentication.
Does anyone know if there is a ...
0
votes
1answer
1k views
(Zimbra)OpenLDAP SSHA512
So, our employees use the Zimbra OpenLDAP, however, since this doesnt include PosixAccount we cant automatically link it to our Synology.
So my boss wanted me to create an OpenLDAP Database, and ...
1
vote
1answer
586 views
I switched my password hashing from md5 to ssha512, now exim4 won't accept smtp-logins
I have recently switched my password hashing from md5 to ssha512. This works fine with dovecot, so I can read incoming mail without problems.
It does not work as well for exim4.
Log output from ...
2
votes
2answers
7k views
How to set specify encryption hash when creating Linux user? [closed]
I want to create a few Linux user on my computer to test JohnTheRipper against different kind of password (including length, charset and encryption hash method). How can I easily specify which hashing ...
0
votes
1answer
1k views
FCIV recursive verification on a xml file
Copying files folder to files_copy folder, one wants to check the files were copied correctly. Fciv.exe permits to make an xml database of the original files and then compare it to the copied ...
2
votes
1answer
721 views
W2012 R2 AD certificate Services sha algorithm
So shortly after configuring an offline root CA and online AD subordiante CA with SHA512 for future proofing. We discovered a thin client vender (teradici zero client with View 6) only supports SHA1 ...
1
vote
2answers
3k views
Thawte SSL123 SHA-2 Intermediate Certificate Chain, Broken?
I attempted to upgrade my one Web site, running nginx, from a SHA-1 SSL123 certificate to a SHA-2 one.
Thawte's Web page with intermediate CAs has "RSA SHA-2 (under SHA-1 Root)" and "RSA SHA-2 (...
0
votes
1answer
67 views
After Updating to SHA2, private and public doesn't match
I've upgraded to SHA2 certificate, but after upgrading the new certificate key doesn't match my old private key.
Public key has changed after updating and it doesn't match to previous private key.
...
3
votes
1answer
79 views
Should Chrome's SHA-1 match OpenSSL's?
If I compare the SHA-1 shown for the certificate for https://0000.jp in Chrome:
79 72 28 12 74 83 85 DE 3C B0 DE E7 A4 C3 14 BE B4 93 79 6E
with that presented by OpenSSL:
$ echo -n | openssl ...
-2
votes
1answer
361 views
Understanding linux /etc/shadow file structure (Linux) [closed]
Consider the following line taken from /etc/shadow file:
root:$1$NFEf74q.$bmukkxAq9dOMJINgEtP7u0:15258:0:::::
From this I understand that the hashing algorithm is md5 ($1) and starting from third $ ...
4
votes
4answers
1k views
How to generate Amazon Glacier SHA-256 Tree Hash for a file locally?
To verify my files have uploaded correctly, is there a tool to generate the Amazon Glacier Tree Hash SHA-256 for files locally?
2
votes
1answer
1k views
MySQL and SSL with -sha256
I'm trying to create some certificate to use with MySQL and everything works fine if I use the sha1 algorithm. If I add the -sha256 switch or -sha384 I can NOT connect to MySQL!. I get this error: ...
3
votes
1answer
5k views
SHA-2 signed SSL certificate crashes apache on startup on CentOS 5.X
In preparation of the warnings that are going to start showing up in browsers when visiting SSL sites with SHA1 signed certificates, I wanted to get all of the certs that I have upgraded.
Some of ...
5
votes
2answers
13k views
Generating an SHA256 SSL CSR on CentOS/RHEL using genkey
The officially recommended method of generating a web server SSL certificate CSR (according to RHEL6 and CentOS 6 documentation) is to use the genkey utility. When used according to the docs, this ...
