NigelCunningham / pam-MySQL

PAM MySQL
GNU General Public License v2.0
111 stars 61 forks source link

Blowfish and 2y series hashes #51

Open karunakar2 opened 5 years ago

karunakar2 commented 5 years ago

Hello i'm using pam_mysql for authentication and bumped into couple of issues. i can successfully use crypt 0 with logs in db (not recommended) but have issues with blowfish encrypted ones. if i use crypt=1 blowfish=1, i end up with invalid token option and if i use crypt=1 alone, password returns 6. Neither of which give a good clue. i've been using crypt function of php to create hashes with password default option. (please check https://github.com/panique/php-login-minimal/blob/master/classes/Registration.php for similar code). The documentation online for this module seems to be sparse and digging through the code was not so much fruitful for me. can anyone give me some leads on how to handle proper authentication (also the contents of file under pam.d for a proper authentication, atleast against nginx auth)