Re: HTTP + login and Psswrd




"mcss" <mcss@xxxxxxxxxxxxxxxx> wrote in message
news:pan.2006.06.13.18.44.55.622571@xxxxxxxxxxxxxxxxxxx
On Tue, 13 Jun 2006 21:56:44 +0100, Stephane M wrote:


"Stephane M" <Stephane@.com> wrote in message
news:e6n8d3$au9$1$8302bc10@xxxxxxxxxxxxxxxxxxx
hi,

I have install a Webserver with passwrod and Login..
My httpd.conf is like :

</Directory /var/www/html/xx>
AllowOverride AuthConfig
AuthType Basic
AuthName "dddd"
AuthUserFile /var/www/users
Require valid-user
</Directory>

now, I setup my password to be like :" aaaaaaaa1111"
With a -> letters
with 1 -> numbers

And I quite surprised to see that : If I use the password :

aaaaaaaa1111 -> Login Correct
abaaaaaa1111 -> Login incorrect

but aaaaaaaa -> Login correct !!!!?!?!!??

If I write the password WITHOUT the last 4 numbers -> the login is
accepted !??

- Do you know if Numbers should not be used ?
- Apache take account a max of 8 characters ??

Thanks for your help





I forgot to mention that I am using CentOS V4.3

Thanks

Get a password cgi-script for the page in question


How do you do that ?? :-(


.



Relevant Pages

  • Re: HTTP + login and Psswrd
    ... I have install a Webserver with passwrod and Login.. ... Require valid-user ... I setup my password to be like:" aaaaaaaa1111" ... aaaaaaaa1111 -> Login Correct ...
    (linux.redhat)
  • Re: HTTP + login and Psswrd
    ... I have install a Webserver with passwrod and Login.. ... Require valid-user ... I setup my password to be like:" aaaaaaaa1111" ... aaaaaaaa1111 -> Login Correct ...
    (linux.redhat)
  • Re: HTTP + login and Psswrd
    ... I have install a Webserver with passwrod and Login.. ... Require valid-user ... I setup my password to be like:" aaaaaaaa1111" ... aaaaaaaa1111 -> Login Correct ...
    (linux.redhat)
  • HTTP + login and Psswrd
    ... I have install a Webserver with passwrod and Login.. ... Require valid-user ... I setup my password to be like:" aaaaaaaa1111" ... aaaaaaaa1111 -> Login Correct ...
    (linux.redhat)
  • Re: Secure Folders
    ... them to the login page. ... Simple enough to setup, all of 5 minutes of work. ... > With regards to preventing them accessing an image directly - slightly ... > for some reason decides to take the URL of an image in the secure area, ...
    (microsoft.public.inetserver.asp.general)