Re: Auth Challenge Responce

Hi, On Tue, 27 May 2003, Yavor Shahpasov wrote: > Basically I nicked your js code :) > > Anyhow, this is just a proof of consept, am waiting for some approval on > this > > can you explain this about the chapid sure, it's easy: after each auth-try the id is incremented, that's all. we can register a session-var, and increment this var after each try. This would give as also the chance to stop the authentication-process if the user has to many failed logins. > > > My general idea was to have a chap template parameter in a string with all > possible vars which would have any significance > > ex: $chaptpl = "%chapid% %challenge% %responce%"; > > where the values in %% would be replaced with their values, this would be > implemented both in the js functions and in the php code, allowing to change > the way the responce is calculated. You might want to give a brief intro to > ms-chapv1 and v2 maybe am missing something. > the ex. above is ok for chap-md5 (or chap-md5-md5, if the pw is stored as md5 in the db), but ms-chap works a bit different, ms-chap uses des for generating the hash and ms-chapv2 sha1, but ms-chapv2 uses 2 challenges, one one the client (browser) and the other one on the server, take a look at the Crypt_CHAP package. Both ms-chapv1 and v2 need the password as NT-HASH. I think we need here completely different functions, so we have to set the chapType: var $chapType = 'chap-md5'; // other possible values: null, chap-md5-md5, ms-chapv1, ms-chapv2 however, it would be ok if Auth can handle chap-md5 (and chap-md5-md5), all other things are not so important. bye, -- ------------------------------- ---------------------------------- Michael Bretterklieber - http://www.bretterklieber.com JAWA Management Software GmbH - http://www.jawa.at Tel: ++43-(0)316-403274-12 - GSM: ++43-(0)676-84 03 15 712 ------------------------------- ---------------------------------- "...the number of UNIX installations has grown to 10, with more expected..." - Dennis Ritchie and Ken Thompson, June 1972