Shyne
08-05-2002, 05:03 PM
Why is the while creating passwords for FTP and E-mail the passwords are not shadowed? Are they passed to the server as clear text?
![]() | View Full Version : unsecure cpanel Shyne 08-05-2002, 05:03 PM Why is the while creating passwords for FTP and E-mail the passwords are not shadowed? Are they passed to the server as clear text? ToastyX 08-05-2002, 05:13 PM Not shadowed? They should be... /etc/proftpd/user has shadowed FTP passwords /home/user/etc/shadow has shadowed e-mail passwords Shyne 08-05-2002, 05:55 PM Yes, on the server they get shadowed, but while you're typing them in the text fields they aren't. When you click submit they are still clear text. netacore 08-05-2002, 06:04 PM CPanel secure port: 2083 WHM secure port: 2087 jayjay 08-05-2002, 06:07 PM Yes, on the server they get shadowed, but while you're typing them in the text fields they aren't. When you click submit they are still clear text. Even if it was shadowed, you still could get screwed. Shyne 08-05-2002, 08:30 PM Originally posted by netacore CPanel secure port: 2083 WHM secure port: 2087 When you say secure do you mean using SSL? As in https://domain:2083/ ? If yes then that doesn't work. ToastyX 08-05-2002, 09:06 PM What do you mean that doesn't work? You asked why FTP and e-mail passwords are not shadowed, but they are. If you use SSL, they are not passed to the server as clear text. I don't see what the problem is. :confused: Also, FTP and POP3 are clear text protocols anyway, so I don't see what you're trying to get at. Shyne 08-05-2002, 11:08 PM Doesn't work meaning it displays a standard 404 that IE gives. Shyne 08-05-2002, 11:09 PM Originally posted by ToastyX What do you mean that doesn't work? You asked why FTP and e-mail passwords are not shadowed, but they are. If you use SSL, they are not passed to the server as clear text. I don't see what the problem is. :confused: Also, FTP and POP3 are clear text protocols anyway, so I don't see what you're trying to get at. I realize that FTP and POP3 are clear text passwords but while creating them in the control panel they are not passed as shadowed passwords. |