[icecast] Encrypted password problem with icecast 1.3.11

[Sean /The RIMBoy/]

On Mon, 26 Nov 2001, Thomas Steiger wrote:

> This is what I get when I do ldd on the icecast binary.
> 
> [root at gala bin]# ldd icecast
>         libcrypt.so.1 => /lib/libcrypt.so.1 (0x0ffb3000)
>         libm.so.6 => /lib/libm.so.6 (0x0ff65000)
>         libpthread.so.0 => /lib/libpthread.so.0 (0x0ff2e000)
>         libc.so.6 => /lib/libc.so.6 (0x0fde9000)
>         /lib/ld.so.1 => /lib/ld.so.1 (0x30000000)
> [root at gala bin]#
> 
> It looks like the libcrypt is there alright. I guess that I am still
> wondering how the encryption can work if the mkpasswd program does not
> produce the same results every time? Thoughts?

Actually, you want mkpasswd to generate different hashes each
time.  Otherwise you've just handed the attacker the keys.

I tried and tried to get crypted passes to work but to no avail.  It's
been awhile since I've done any work with Icecast so YMMV.  I'm not sure
if the crypting hooks are in place on my floppy based distro.  I think
/bin/login for the console is compiled static.  I'm going to rip Icecast
out one of these days from my project so it's really not an issue for me.

Sean...


-- 
Believing I had supernatural powers, I slammed into a brick wall.
	--Paul Simon
_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_
KG4NRC
www.rimboy.com		<-- Your source for the crap you know you need.

--- >8 ----
List archives:  http://www.xiph.org/archives/
icecast project homepage: http://www.icecast.org/
To unsubscribe from this list, send a message to 'icecast-request at xiph.org'
containing only the word 'unsubscribe' in the body.  No subject is needed.
Unsubscribe messages sent to the list will be ignored/filtered.