basic auth not working 100%

AMP Admin admin at ampprod.com
Sat Apr 10 19:33:41 MSD 2010



-----Original Message-----
From: Boris Dolgov [mailto:boris at dolgov.name] 
Sent: Wednesday, April 07, 2010 11:07 AM
To: nginx at nginx.org
Subject: Re: basic auth not working 100%

On Wed, Apr 7, 2010 at 7:33 PM, AMP Admin <admin at ampprod.com> wrote:
> On one of my boxes I noticed that if the password is only half the string
it
> will authenticate.
> Should be:
> Username: tester
> Pass: ThisPassword1234#&^
> But the following authenticates:
> Username: tester
> Pass: ThisPassword
> Can anyone confirm this behavior?

ThisPass will also authenticate - crypt() uses only first 8 symbols of
the password.

-- 
Boris Dolgov.

_______________________________________________


is there a way to make it longer?




More information about the nginx mailing list