[arm-allstar] SUPERMON -- login.php encryption updated

[David McGough]

Hi Neil and Justin,

I've hacked on the login.php code in supermon, and addressed
the issue with only allowing basic DES encryption in the .htpasswd file.

Now, the standard apache DES, APR1-MD5 and Blowfish formats are supported.
I did not implement SHA1 or plain-test, since these methods are 
deprecated.

Please update to the latest hamvoip-supermon package to get these changes.


73, David KB4FXC



On Sat, 18 Mar 2017, "Neil Mooney via arm-allstar" wrote:

> Justin,
> 
> 
> If you look in the login.php file there is only code to deal with DES encryption.
> 
> 
> Regards,
> 
> Neil
> M0NFI
> ________________________________
> From: arm-allstar <arm-allstar-bounces at hamvoip.org> on behalf of "Justin Reed via arm-allstar" <arm-allstar at hamvoip.org>
> Sent: 18 March 2017 17:16:36
> To: ARM Allstar
> Cc: Justin Reed
> Subject: Re: [arm-allstar] SUPERMON is here!
> 
> Doug,
> What is the reason for forcing -d (crypt) passwd encoding? I'm just curious.
> 
> Supermon looks really good so far. I'm just trying to import my passwd
> file that I use on IRLP nodes and the only logins that work are the
> crypt encoded ones.
> 
> 73,
> Justin
> NV8Q
> 
> 
> On 3/18/2017 1:39 AM, "Doug Crompton via arm-allstar" wrote:
> > ​Supermon is here! Just do an ADMIN menu item 1 update and reboot your
> > system. Be sure to read the howto listed below or in the howto section of
> > hamvoip.org​. There is some setup required as documented in the howto.
> >
> > Supermon is a much advanced Allmon2 supplying many features the user may
> > need
> > ​ to manage their nodes​
> > . It integrates lsnodes, Allstar control, Log control, File editing,
> > ​IRLP, Echolink ​
> > and much more all in one place.
> >
> > Paul Aidukas, KN2R has been working on an improved Allmon2 for several
> > years and Supermon is the result. I have been working with him over the
> > last month or so integrating it into the V1.5 code.
> >
> > The best place to learn about Supermon is the Supermon howto link I have
> > placed on the hamvoip.org web page.
> >
> > Here is a direct link to the page - https://hamvoip.org/supermon_howto.pdf
> >
> > This does not replace Allmon2 which is already part of the V1.5 package. It
> > will be loaded in addition to that package in a different directory. Both
> > can operate side-by-side if desired.
> > ​ If you are already using Allmon2 it will function as normal after
> > installing Supermon.
> >
> >
> > *73 Doug*
> >
> > *WA3DSP*
> >
> >
> > *http://www.crompton.com/hamradio <http://www.crompton.com/hamradio>*
> > _______________________________________________
> >
> > arm-allstar mailing list
> > arm-allstar at hamvoip.org
> > http://lists.hamvoip.org/cgi-bin/mailman/listinfo/arm-allstar
> >
> > Visit the BBB and RPi2/3 web page - http://hamvoip.org
> 
> 
> _______________________________________________
> 
> arm-allstar mailing list
> arm-allstar at hamvoip.org
> http://lists.hamvoip.org/cgi-bin/mailman/listinfo/arm-allstar
> 
> Visit the BBB and RPi2/3 web page - http://hamvoip.org
> _______________________________________________

arm-allstar mailing list
arm-allstar at hamvoip.org
http://lists.hamvoip.org/cgi-bin/mailman/listinfo/arm-allstar

Visit the BBB and RPi2/3 web page - http://hamvoip.org