FTP passwords in plain text

[Me.B]

I replyed some in the designtatd threads.

I forgot one thing to mention. Sentora really should stop saving the FTP passwords in plain text.

Ok let's try but I think we need an extra module in the stack..

http://www.proftpd.org/docs/directives/l...Types.html

We need to change it. It can be done but we should test upgrade process before.

M B

[bbspike]

I replyed some in the designtatd threads.

I forgot one thing to mention. Sentora really should stop saving the FTP passwords in plain text.

Ok let's try but I think we need an extra module in the stack..

http://www.proftpd.org/docs/directives/l...Types.html

We need to change it. It can be done but we should test upgrade process before.

M B

Yes the only thing needs to be done is change the SQLAuthType to OpenSSL or Backend and change the code in the sentora module with someting like:

PHP Code:

$password = "{md5}".base64_encode(pack("H*", md5($password))); 


[Me.B]

Yep but issue is upgrading existing users....

[bbspike]

Yeah true.

I already have change a Sentora server of us. Now its stores ftp passwords as SHA512.

Updating existing users was easy:

Code:

UPDATE ftpuser SET passwd=SHA2(passwd, 512)

Above code can easily be used in the update script.

The passwd column must be set to 180 tokens for this.

[Me.B]

Ok got them

https://github.com/sentora/sentora-insta...ones/1.0.5

Currently tagged them for next release until I sort out some fixes getting implemented for 1.0.4.

1.0.5 is due with 2 month's not that far. And may be in 1.0.4.

Thant really help.