PacketFence - BTS - PacketFence
View Issue Details
0001569PacketFencesecuritypublic2012-10-15 10:522012-10-19 10:58
fdurand 
fgaudreault 
normalmajoralways
resolvedno change required 
Linux
3.5.1 
 
0001569: Htaccess problem with password superior to 8 caracters
With htaccess authentication, packetfence just check the first 8 caracters.
Add a user in users.conf with a password more than 8 caracters and try to logging with only the first 8 caracters. It will match.
No tags attached.
Issue History
2012-10-15 10:52fdurandNew Issue
2012-10-17 13:33fgaudreaultNote Added: 0003118
2012-10-19 10:58fgaudreaultNote Added: 0003123
2012-10-19 10:58fgaudreaultStatusnew => resolved
2012-10-19 10:58fgaudreaultResolutionopen => no change required
2012-10-19 10:58fgaudreaultAssigned To => fgaudreault

Notes
(0003118)
fgaudreault   
2012-10-17 13:33   
It's a limitation of the upstream algorithm. The only thing we can do is... dropping htpasswd :P
(0003123)
fgaudreault   
2012-10-19 10:58   
We cannot do anything about it, it's a limitation of the htpasswd algorithm.