(02-21-2016, 04:36 AM)bbspike Wrote: [ -> ]I replyed some in the designtatd threads.
I forgot one thing to mention. Sentora really should stop saving the FTP passwords in plain text.
Ok let's try but I think
we need an extra module in the stack..
http://www.proftpd.org/docs/directives/l...Types.html
We need to change it. It can be done but we should test upgrade process before.
M B
(02-21-2016, 05:06 AM)Me.B Wrote: [ -> ] (02-21-2016, 04:36 AM)bbspike Wrote: [ -> ]I replyed some in the designtatd threads.
I forgot one thing to mention. Sentora really should stop saving the FTP passwords in plain text.
Ok let's try but I think we need an extra module in the stack..
http://www.proftpd.org/docs/directives/l...Types.html
We need to change it. It can be done but we should test upgrade process before.
M B
Yes the only thing needs to be done is change the SQLAuthType to OpenSSL or Backend and change the code in the sentora module with someting like:
PHP Code:
$password = "{md5}".base64_encode(pack("H*", md5($password)));
Yep but issue is upgrading existing users....
Yeah true.
I already have change a Sentora server of us. Now its stores ftp passwords as SHA512.
Updating existing users was easy:
Code:
UPDATE ftpuser SET passwd=SHA2(passwd, 512)
Above code can easily be used in the update script.
The passwd column must be set to 180 tokens for this.