README.sha1

This directory includes some utilities to allow Apache 1.3.6 to 
recognize passwords in SHA1 format, as used by Netscape web servers.  

From Netscape's admin interface, export the password database to an 
ldif file and then use convert.pl in this distribution to generate 
apache style password files.  

Note: SHA1 support is useful for migration purposes, but is less
      secure than Apache's password format, since Apache's (MD5)
      password format uses a random eight character salt to generate
      one of many possible hashes for the same password.  Netscape
      uses plain SHA1 without a salt, so the same password
      will always generate the same hash, making it easier
      to break since the search space is smaller.

This code was contributed by Clinton Wong <clintdw@netcom.com>.

README.sha1 
	this file

convert-sha1.pl 
	takes an ldif dump from Netscape's web server on
        standard in, outputs apache htpasswd format on standard out.

        Usage: convert.pl < ldif > passwords

htpasswd-sha1.pl
	perl script to generate entries in apache htpasswd format.

       	Usage: htpasswd-sha1.pl some_user some_password

ldif-sha1.example
	sample ldif dump with one sha1 password and one crypt password.