Questions tagged [hash]
The hash tag has no usage guidance.
106
questions
0
votes
1answer
26 views
Windows Server 2012: how to prevent IIS from choosing SHA-1 for connections?
The problem: IIS on Windows 2012 picks SHA-1 algorithm when the client uses SHA-1 certificate. Even though the server-side certificate is SHA-256. So Chrome/Edge don't work.
On analogous Windows 2016 ...
0
votes
1answer
31 views
How to instruct Postfix to block a specific Hash (to protect against a known IOC attack) of attached files or content?
an attack is ongoing and we want to block at the relay mail level, some Hashes (of attached files or even the email content) to be sent or received. I want to instruct postfix to reject mail with ...
0
votes
0answers
58 views
Why does this guide encrypt its passwords in its own database?
I'm referring to this guide, notably this part here:
INSERT INTO `servermail`.`virtual_users`
(`id`, `domain_id`, `password` , `email`)
VALUES
('1', '1', ENCRYPT('firstpassword', CONCAT('$6$', ...
0
votes
0answers
276 views
Can't change size of types_hash_max_size
Currently I'm trying to setup a nextcloud server with nginx. Now I've the following in my /etc/nginx/sites-available/nextcloud.conf:
server {
listen 443 ssl;
server_name localhost;
(...)
...
2
votes
3answers
93 views
Is checking data integrity with hashes useful for my scenario?
I have a NAS as production system (mostly video footage and project files) and a 1:1 backup. I only need to retrieve the backup data in cases of emergency. Such a case didn't occur yet.
Lately I'm ...
0
votes
1answer
288 views
Compute and update the md5 hash after the fact
So... I just realized that the utility I’ve been using to upload data to azure blobs has only been setting content-md5 hashes for the small files, leaving the larger (more important) files without a ...
1
vote
1answer
82 views
Which EC2 Instance to hash a large amount of 25gb files
I have an EBS (elastic block storage) on AWS with large amount of 25GB files (1000). I would like to calculate a SHA256 sum for each file.
Which EC2 instance would be the best for such task (cpu ...
0
votes
1answer
77 views
Unknown directive “hash” for nginx while using with $remote_addr
I have using ip_hash in nginx conf file but found the requests were always redirected to same server address. Found that using $remote_addr should help to resolve this but nginx gives error
2020/05/...
1
vote
0answers
24 views
What hash function is used to cache credentials on Windows 10?
I am looking for the hash function used by Windows to cache user passwords locally on a computer. The client machine would run Windows 10. The AD Controller would run Windows Server 2016.
0
votes
0answers
47 views
Modify OpenLDAP hashing algorithm [duplicate]
I have a CentOS7 Server running slapd 2.4.44 and I'd like to modify the default hashing algorithm being used. Instead of using SSHA, i'd like to use SHA-256 or SHA-512.
I've been having trouble ...
0
votes
1answer
120 views
Openldap re-hashes already hashed password
I have an openldap with ppolicy on SSHA-512. When clear text password is sent from client, the password will be stored as SSHA-512, fine.
My problem appears, once already hashed password is send e.g ...
1
vote
1answer
115 views
Templated dict keys in ansible YAML
I am trying to use a dict in an Ansible task, which is defined like this:
in vars/main.yml file:
username: user1
userpass: pass1
users:
"{{ username }}":
pass: "{{ userpass }}"
This doesn't ...
1
vote
0answers
17 views
Is there a way to tell what image was used to deploy a machine from Windows Deployment Services?
Is there a way to tell what image was used to deploy a machine from Windows Deployment Services? Is there some sort of a hash that would identify a machine being deployed from a particular image?
1
vote
1answer
452 views
haproxy tls hash algorithm
I'm using HAProxy 1.7.5 and openssl 1.1.0f (from Debian 9.5 stabel) to serve TLS connections.
Now there are clients offering SHA-384 and SHA-512 based signature algorithms in the client hello message. ...
2
votes
1answer
3k views
Set already hashed password for user against open ldap
Let me describe the infrastructure I am trying to configure. There is an opne ldap server on centOS (running slapd 2.4.40) as distributed authentication method for a couple of boxes.
Is there a way ...
0
votes
1answer
1k views
How to reset Ubiquiti UniFi Controller admin password?
I need to get into a Ubiquiti UniFi Controller system that was setup by one of my predecessors. The admin password has long since been lost and the company now uses a different Wi-Fi system at the ...
1
vote
1answer
57 views
shasum returns an incorrect result
Calculating SHA256 gives me an incorrect result when I'm using "shasum":
$ echo "abcd" | shasum -a 256
fc4b5fd6816f75a7c81fc8eaa9499d6a299bd803397166e8c4cf9280b801d62c -
# or
$ echo abcd | shasum -...
0
votes
1answer
871 views
multiple sha1 file hashes conversion
Issue Description:
I'm trying to comply with our Security Advisories. The advisories contain nearly 1000 MD5 & Sha 256 file hashes. I need to convert them into sha1 and update them in our endpoint ...
0
votes
3answers
1k views
Can you set the number of rounds that ansible's password_hash jinja2 filter uses?
In ansible, it's pretty convenient to use something like this:
- name: Make sure user password is set
user:
name: my_user
password: "{{ user_password|password_hash('sha512', 'SomeSalt') }}"...
0
votes
0answers
382 views
get SHA256 has of certificate chain of my certificate
I got my server certificate mycert.pem by command:
cho -n | openssl s_client -connect <my.server.hostname> | sed -ne '/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p' > mycert.pem.
I would like ...
0
votes
1answer
561 views
Linux FTP server which can work with unsalted SHA256 hashes?
Problem
Some old WS_FTP server stopped booting at work after a Windows update. The corresponding admin is long gone. The only information I have is :
file structure
user names
unsalted SHA256 hash ...
0
votes
1answer
26 views
compare 2 directories with different files names and locations of the files
I'm currently having 2 (top level) directories with a lot of sub directories and files.
There are a lot of duplicate files between those directories but there is one problem with it, the names of the ...
0
votes
1answer
296 views
sendmail authentication with passwords in SHA512 hash
Is it possible for sendmail to authenticate users from LDAP with passwords stored as SHA512 hash ?
If yes, how?
Edit: OS is Arch Linux and i want to use only LDAP to authenticate users.
4
votes
3answers
981 views
How does “your new password must differ at least n characters from the previous” work when only hash codes are stored?
I am wondering how the password policy "your new password must differ at least n characters from your old password" works.
My understanding is that the OS never actually stores the old passwords ...
8
votes
3answers
14k views
Nginx: could not build map_hash, you should increase map_hash_bucket_size: 64
I need to use redirect map with quite a lot rules (2k+ lines, file size is ~200K)
I have the following settings in nginx:
map $uri $new_uri {
include /etc/nginx/conf.d/redirects.map;
}
...
0
votes
1answer
818 views
Does any varnish using directors.hash() and hash.backend() always choose the same backend?
I have 2 varnish, each of them having 2 backends (same varnish versions -v4.x- and configuration file).
Incoming client connections are randomly distributed to any available varnish.
I need clients ...
11
votes
3answers
3k views
Windows 2012 R2 - Search for Files using MD5 Hash?
My organization recently discovered malware that was sent to some users via email that managed to get past our email security in a sophisticated, targeted attack. The names of the files vary from user ...
14
votes
1answer
1k views
Why isn't MacTripleDes algorithm output in PowerShell stable?
I am checking the file hashes using several different algorithms in powershell. When I use MacTripleDes, I always get different hashes. All of the others, such as SHA256 or MD5 always give reliable ...
0
votes
2answers
1k views
Secure link depending only on directory name?
I am currently struggling to make nginx secure just folder name, dependlessly what the file name inside of it is. Let's say, I'm accessing a file in a folder /one/two/three, it would look like this:
...
0
votes
1answer
77 views
ansible hash summ of vaiables
Help please, the second day can not solve the problem.
I need to add checksum sha1 in file that is created from a template
Example:
{{ item.some_var1 | hash('sha1') }} - work fine
But when I'm trying ...
2
votes
1answer
2k views
CSP nginx nonce
I have some problems with adding CSP to my site. I configured Content-Security-Policy-Report-Only in my nginx configuration. And i get this.
adsbygoogle.js:37 [Report Only] Refused to apply inline ...
9
votes
7answers
7k views
How does one check huge files identity if hashing is CPU bound?
For small files hashing is just ok, but with huge ones you can easily find md5sum is CPU bound. Is there any hashing algorithm able to scale out on multiple cores? Any workarounds? Ideas? Anything? :)
0
votes
0answers
286 views
How can I replicate Microsoft .NET manifest hashes, ideally on Linux command line?
I have a .NET click-once application which, I found out the hard way (user could not install), checks the checksums of its configuration files against checksums in the .exe.manifest as calculated at ...
1
vote
1answer
56 views
How to know which files to specify exclusions for the installers of whitelisted apps using hashes with a Windows GPO?
To specify in the software restriction GPO, the hashes of executable/script files that are allowed to execute during the installation of a program run from, for example %LOCALAPPDATA%\Temp, during ...
0
votes
1answer
111 views
What is the exact Juniper and Cisco router per-packet balancing hash algorithm?
Due to JunOS and Cisco documentation there is ability to configure hashing algorithm choosing one of the next-hop from the several multiple equal-cost paths. There is information about fields that ...
0
votes
1answer
729 views
Custom algorithm for password hashing with vsftpd
Traditionally, when the client logs in, it sends the credentials (username+pw) without any further processing. The server then checks if an entry exists in its user database that matches the supplied ...
2
votes
1answer
715 views
Cloud-Config - Hashed Password Being Set Incorrectly
I'm provisioning an Ubuntu 14.04 server with Digital Ocean and am using Cloud-Config in the user data field to do some initial setup. The issue I am having is creating a new user and setting a ...
0
votes
1answer
137 views
rsync syncs too much files
I have the following directory structure:
/tmp1
\_ file1.txt
\_ file2.txt
/tmp2
\_ file1.txt
\_ file2.txt
\_ file3.txt
/changes
With rsync's --compare-dest option, I want to sync all ...
1
vote
1answer
349 views
RKHunter report: “No hash value found”
I'm getting RKHunter warnings every day when my cron job runs the check.
I'm on FreeBSD 10.2
This is the warning I'm getting:
Warning: No hash value found for file '/usr/bin/perl' in the 'rkhunter....
1
vote
2answers
725 views
How can I distribute clients to servers evenly with hash_ip in Nginx as loadbalancer?
I know Nginx can use hash_ip to tie specific clients to a server.
My question is when Nginx is hashing with client IP, does it distribute clients to servers evenly regardless of whatever client IP is ...
3
votes
1answer
6k views
How to use SHA-256 hashed (and salted) passwords from OpenLDAP in pam_ldap?
I have hashed and salted passwords in OpenLDAP for login via PAM in Linux. The setup works when the hashes are of type SHA-1 (salted or unsalted) or plain text. In these cases everything works fine ...
5
votes
1answer
2k views
What does AAA mean in nginx example of split_clients?
On nginx docs there is an example of split_clients directive:
split_clients "${remote_addr}AAA" $variant {
0.5% .one;
2.0% .two;
...
0
votes
1answer
23 views
Logging or Auditing functionality for un/successful access to password hash files and other authentication files on Windows Server 2008 R2
I have been asked to find whether there is auditing enabled for one of our Windows Servers for accessing password hash files or other files used for authentication.
Does anyone know if there is a ...
0
votes
1answer
1k views
(Zimbra)OpenLDAP SSHA512
So, our employees use the Zimbra OpenLDAP, however, since this doesnt include PosixAccount we cant automatically link it to our Synology.
So my boss wanted me to create an OpenLDAP Database, and ...
1
vote
1answer
686 views
I switched my password hashing from md5 to ssha512, now exim4 won't accept smtp-logins
I have recently switched my password hashing from md5 to ssha512. This works fine with dovecot, so I can read incoming mail without problems.
It does not work as well for exim4.
Log output from ...
2
votes
2answers
8k views
How to set specify encryption hash when creating Linux user? [closed]
I want to create a few Linux user on my computer to test JohnTheRipper against different kind of password (including length, charset and encryption hash method). How can I easily specify which hashing ...
0
votes
1answer
1k views
FCIV recursive verification on a xml file
Copying files folder to files_copy folder, one wants to check the files were copied correctly. Fciv.exe permits to make an xml database of the original files and then compare it to the copied ...
2
votes
1answer
726 views
W2012 R2 AD certificate Services sha algorithm
So shortly after configuring an offline root CA and online AD subordiante CA with SHA512 for future proofing. We discovered a thin client vender (teradici zero client with View 6) only supports SHA1 ...
1
vote
2answers
3k views
Thawte SSL123 SHA-2 Intermediate Certificate Chain, Broken?
I attempted to upgrade my one Web site, running nginx, from a SHA-1 SSL123 certificate to a SHA-2 one.
Thawte's Web page with intermediate CAs has "RSA SHA-2 (under SHA-1 Root)" and "RSA SHA-2 (...
0
votes
1answer
67 views
After Updating to SHA2, private and public doesn't match
I've upgraded to SHA2 certificate, but after upgrading the new certificate key doesn't match my old private key.
Public key has changed after updating and it doesn't match to previous private key.
...
