关于perl crypt函数加密与apache2.2中htpasswd 生成加密密码的问题

东北胖子

我们搭建了一个SVN服务器，想让员工自己修改SVN密码，于是使用了apache2.2与subversion 1.7.13集成。采用了如下脚本 来修改密码

每次修改密码都不成功，提示旧密码错误

我想是因为 apache2.2中的htpasswd生成的加密密码与perl crypt函数生成的密码不一样吧，不知道我判断的对不对。请大家帮忙

怎么样修改可以使  crypt函数生成的加密密码与 htpasswd生成的密码一样？

代码在 70行至93行之间

1. #!/usr/bin/perl -w
   
2. 
   
3. use strict;
   
4. use CGI;
   
5. my $time        = localtime;
   
6. my $remote_id   = $ENV{REMOTE_HOST} || $ENV{REMOTE_ADDR};
   
7. my $admin_email = $ENV{SERVER_ADMIN};
   
8. 
   
9. my $cgi = new CGI;
   
10. my $pwd_not_alldiginal = "密碼不能全爲數字";
    
11. my $pwd_not_allchar = "密碼不能全爲字符";
    
12. my $user_not_exists ="該用戶不存在";
    
13. my $file_not_found ="文件不存在,請聯繫管理員";
    
14. 
    
15. my $authuserfile;
    
16. my $logfile;
    
17. my $pwdminlen;
    
18. my $title;
    
19. my $description;
    
20. my $yourname;
    
21. my $oldpwd;
    
22. my $newpwd1;
    
23. my $newpwd2;
    
24. my $btn_change;
    
25. my $btn_reset;
    
26. 
    
27. my $changepwdok;
    
28. my $changepwdfailed;
    
29. my $oldpwderror;
    
30. my $passmustgreater;
    
31. my $twopassnotmatched;
    
32. my $entername;
    
33. my $enterpwd;
    
34. my $errorpwd;
    
35. my $back;
    
36. 
    
37. &IniInfo;
    
38. 
    
39. if ($cgi -> param())
    
40. {#8
    
41. my $User = $cgi->param('UserName');
    
42. my $UserPwd = $cgi->param('OldPwd');
    
43. my $UserNewPwd =  $cgi->param('NewPwd1');
    
44. my $MatchNewPwd =  $cgi->param('NewPwd2');
    
45. 
    
46. if (!$User)
    
47.      {&Writer_Log("Enter no user name");
    
48.        &otherhtml($title,$entername,$back);}
    
49. elsif (!$UserPwd )
    
50.     {&Writer_Log("Enter no OldPasswd");
    
51.      &otherhtml($title,$enterpwd,$back); }
    
52. elsif (length($UserNewPwd)<$pwdminlen)
    
53.     {&Writer_Log("Password's length must greater than".$pwdminlen);
    
54.      &otherhtml($title,$passmustgreater.$pwdminlen,$back);}
    
55. elsif ($UserNewPwd =~/^\d+$/)
    
56.     {&Writer_Log("New Passwd isn't all diginal");
    
57.      &otherhtml($title,$pwd_not_alldiginal,$back);}
    
58. elsif ($UserNewPwd =~/^[A-Za-z]+$/)
    
59.     {&Writer_Log("New Passwd isn't all char");
    
60.      &otherhtml($title,$pwd_not_allchar,$back);}
    
61. elsif ($UserNewPwd ne $MatchNewPwd)
    
62.     {&Writer_Log("Two new passwords are not matched");
    
63.      &otherhtml($title,$twopassnotmatched,$back);}
    
64. else
    
65. {if($authuserfile)
    
66. {#6
    
67.   open UserFile, "<$authuserfile" or die "打開文件失敗：$!";
    
68.   while (<UserFile>)
    
69.     {#5
    
70.        my $varstr=$_;
    
71. 
    
72.        if($varstr =~/($User)/)
    
73.     {#3
    
74.      my $eqpos =index($varstr, ":");
    
75.      my $UserName = substr($varstr,0,$eqpos);
    
76.      my $cryptpwd = substr($varstr,$eqpos + 1,13);
    
77.    
    
78.      next if($UserName ne $User);
    
79.         
    
80.      if(crypt($UserPwd,$cryptpwd) eq $cryptpwd)
    
81.      {#a
    
82.       my $rc = system("/usr/local/apache2/bin/htpasswd -b $authuserfile $User $UserNewPwd");
    
83.       if ($rc == 0)
    
84.          {#1
    
85.             &Writer_Log( $User."：Change Passwd");
    
86.             &otherhtml($title,$changepwdok,$back);
    
87.           }#1
    
88.        else
    
89.           {#2
    
90.            &Writer_Log( $User."：Change Passwd Failed");
    
91.            &otherhtml($title,$changepwdfailed,$back);
    
92.           }#2
    
93.        exit;
    
94.      }#a
    
95.      else
    
96.      {#b
    
97.       &Writer_Log("Old Passwd is Incorrect ");
    
98.       &otherhtml($title,$errorpwd,$back);
    
99.      }#b
    
100.      exit;      
     
101.     }#3
     
102.        else
     
103.     {#4
     
104.      if(eof)
     
105.      { &Writer_Log($User."：no this user");
     
106.        &otherhtml($title,$user_not_exists,$back);
     
107.        exit;
     
108.      }
     
109.      else
     
110.      {next;}
     
111.     }#4   
     
112.      }#5
     
113.    close UserFile;
     
114. }#6
     
115. else
     
116. {#7
     
117.    &Writer_Log($authuserfile."：no found");
     
118.    &otherhtml($title,$file_not_found,$back);
     
119. }#7
     
120. }
     
121. }#8
     
122. else
     
123. {&Index_Html;}
     
124. 
     
125. sub IniInfo{
     
126. my $inifile = "/usr/local/apache2/cgi-bin/ChangePasswd.ini";
     
127. open CGI_INI_FILE, "<$inifile" or die "打開文件失敗：$!";;
     
128. while (<CGI_INI_FILE>)
     
129. {
     
130.   my $eqpos =index($_,'=');
     
131.   my $len = length($_);
     
132. 
     
133.   if ($_ =~/authuserfile/)
     
134.   {$authuserfile= substr($_, $eqpos + 1, $len - $eqpos -2);}
     
135.   elsif ($_ =~/logfile/)
     
136.   {$logfile= substr($_, $eqpos + 1);}
     
137.   elsif ($_ =~/pwdminlen/)
     
138.   {$pwdminlen= substr($_, $eqpos + 1);}
     
139.   elsif ($_ =~/title/)
     
140.   {$title = substr($_, $eqpos + 1);}
     
141.   elsif ($_ =~/description/)
     
142.   {$description = substr($_, $eqpos + 1);}
     
143.   elsif ($_ =~/yourname/)
     
144.   {$yourname = substr($_, $eqpos + 1);}
     
145.   elsif ($_ =~/oldpwd/)
     
146.   {$oldpwd= substr($_, $eqpos + 1);}
     
147.   elsif ($_ =~/newpwd1/)
     
148.   {$newpwd1= substr($_, $eqpos + 1);}
     
149.   elsif ($_ =~/newpwd2/)
     
150.   {$newpwd2= substr($_, $eqpos + 1);}
     
151.   elsif ($_ =~/btn_change/)
     
152.   {$btn_change = substr($_, $eqpos + 1);}
     
153.   elsif ($_ =~/btn_reset/)
     
154.   {$btn_reset = substr($_, $eqpos + 1);}
     
155.   elsif ($_ =~/changepwdok/)
     
156.   {$changepwdok = substr($_, $eqpos + 1);}
     
157.   elsif ($_ =~/changepwdfailed/)
     
158.   {$changepwdfailed = substr($_, $eqpos + 1);}
     
159.   elsif ($_ =~/oldpwderror/)
     
160.   {$oldpwderror = substr($_, $eqpos + 1);}
     
161.   elsif ($_ =~/passmustgreater/)
     
162.   {$passmustgreater = substr($_, $eqpos + 1);}
     
163.   elsif ($_ =~/twopassnotmatched/)
     
164.   {$twopassnotmatched = substr($_, $eqpos + 1);}
     
165.   elsif ($_ =~/entername/)
     
166.   {$entername = substr($_, $eqpos + 1);}
     
167.   elsif ($_ =~/enterpwd/)
     
168.   {$enterpwd= substr($_, $eqpos + 1);}
     
169.   elsif ($_ =~/errorpwd/)
     
170.   {$errorpwd= substr($_, $eqpos + 1);}
     
171.   elsif ($_ =~/back/)
     
172.   {$back = substr($_, $eqpos + 1);}
     
173. }
     
174. close CGI_INI_FILE;
     
175. }
     
176. 
     
177. sub Index_Html
     
178. {
     
179. print "Content-type: text/html\n\n";
     
180. print <<END_OF_PAGE;
     
181. <html >
     
182. <head>
     
183. <title>$title</title>
     
184. <meta http-equiv="Content-Type" content="text/html; charset=gb2312" />
     
185. </head>
     
186. <body>
     
187. <center><h1>$description</h1>
     
188. </center>
     
189. <form method="POST" enctype="multipart/form-data"  action="/cgi-bin/ChangePasswd.cgi">
     
190. <br>
     
191. <TABLE align="center">
     
192. <TR><TD class="t_text">$yourname</TD><TD><input type="text" name="UserName"  /></TD></TR>
     
193. <TR><TD class="t_text">$oldpwd</TD><TD><input type="password" name="OldPwd"  /></TD></TR>
     
194. <TR><TD class="t_text">$newpwd1</TD><TD><input type="password" name="NewPwd1"  /></TD></TR>
     
195. <TR><TD class="t_text">$newpwd2</TD><TD><input type="password" name="NewPwd2"  /></TD></TR>
     
196. </TABLE>
     
197. <br>
     
198. <TABLE align="center">
     
199. <TR><TD><input type="submit" name="chgpasswd" value="$btn_change"> <input type="reset" value="$btn_reset"></TD></TR>
     
200. </TABLE>
     
201. </form>
     
202. <HR>
     
203. <font color="#FF0000">注意:新密碼位數必需大於$pwdminlen，且爲字母與數字組合</font>
     
204. <P>如有問題請與唐風聯繫</P>
     
205. 
     
206. <P>XXXXXX網站：</P>
     
207. <P>公司主頁：<A href="http://www.XXXXX.com/</p">http://www.XXXXX.com/</p>
     
208. </body>
     
209. </html>
     
210. END_OF_PAGE
     
211. }
     
212. 
     
213. sub otherhtml{
     
214. print "Content-type: text/html\n\n";
     
215. 
     
216. print <<END_OF_PAGE;
     
217. <html>
     
218. <head>
     
219. <meta http-equiv="Content-Language" content="zh-cn">
     
220. <meta http-equiv="Content-Type" content="text/html; charset=gb2312">
     
221. <title>$_[0]</title>
     
222. </head>
     
223. 
     
224. <body>
     
225. <p align="center"><font size="5">$_[1]</font></p>
     
226. <p align="center"><a href="/cgi-bin/ChangePasswd.cgi"><font size="4">$_[2]</font></a></p>
     
227. 
     
228. <HR>
     
229. <P>如有問題請與windone聯繫E-Mail: <A HREF=">
     
230. </body>
     
231. 
     
232. </html>
     
233. END_OF_PAGE
     
234. }
     
235. 
     
236. sub Writer_Log{
     
237. if($logfile)
     
238. {
     
239.   my $loginfo ="[".$time."] "." [".$remote_id."] "." || ".$_[0];
     
240.   open LOGFILE,">>$logfile" or die "Couldn't open LOG FILE for writing: $!";
     
241.   print LOGFILE ("$loginfo\n");
     
242.   close LOGFILE;
     
243. }
     
244. }

复制代码

东北胖子

已解决，我在使用htpasswd创建用户和密码时，加上-d参数，这样加密的方式就和crypt 一样了。
htpasswd默认使用的是MD5加密

长江鱼

这个必须要支持一下，我也遇到了相同的问题，看了lz的帖子顺利解决，多谢分享。