Comparing a password against .htpasswd

Paul Rubin phr-n2002b at NOSPAMnightsong.com
Mon May 27 09:58:20 EDT 2002


Der Papst <mennsimons at gmx.net> writes:
> on windows machines htpasswd encrypts using 
> only a modified version of MD5. The md5 module
> delivered together with python does not work with
> the htpasswd-generated passwords. Has anybody
> done something in this area?

I think apache prepends a random salt to the password before hashing
it, and stores the salt in htpasswd.  You should be able to check the
source for what it's doing, then code the same thing in python.



More information about the Python-list mailing list