Re: Apache & mod_auth_pam

["Jeremy C. Reed" <reed@wcug.wwu.edu>]

> > > At the moment I'm using mod_auth_pam for userauthentication on
> > > special webfolders. /etc/shadow have to be accessed by apache

> > And second some password-results aren't exposed like the root-pw and 
> > the accounts to maintain the machine.
> 
> How the root-pw or hash of it could be exposed?

If you are using standard http user authentication is is not encrypted or
secure. The usernames and passwords are passwd via plain text.

  Jeremy C. Reed
echo 'G014AE824B0-07CC?/JJFFFI?D64CB>D=3C427=>;>6HI2><J' |
tr /-_ :\ Sc-y./ | sed swxw`uname`w