Welcome to WebmasterWorld Guest from 54.196.214.35

Forum Moderators: Ocean10000 & incrediBILL & phranque

Message Too Old, No Replies

htpasswd limits on username and pass length

     
3:18 pm on Mar 16, 2007 (gmt 0)

Junior Member

10+ Year Member

joined:Nov 29, 2002
posts:89
votes: 0


Hopefully this is s simple question.

What are the length limits on usernames and psasswords entered via the Apache htpasswd app.?

I ask this because I created a really long password for one account that would not work (authenticate) until I shortened it -- I could probably try a million different length combinations, but if anyone knows for sure...

3:51 pm on Mar 16, 2007 (gmt 0)

Senior Member

WebmasterWorld Senior Member jdmorgan is a WebmasterWorld Top Contributor of All Time 10+ Year Member

joined:Mar 31, 2002
posts:25430
votes: 0


The shortest limit I've seen is 12 characters.

Jim

6:20 pm on Mar 17, 2007 (gmt 0)

Junior Member

10+ Year Member

joined:Nov 29, 2002
posts:89
votes: 0


Thanks JD, here's what I found through very little non-scientific trial and error...

15 chars seems to be the limit for the password (MD5), and there seems to be no real limit on the username as it appears in plain text in the file.

This is using htpasswd.exe -b from Apache HTTPd v1.3.9 (Win32) in a command prompt (CMD.exe) on WinXP/Home/SP1.

Does that seem right? I'll do some more hacking around and see what I find out.

11:28 pm on Mar 17, 2007 (gmt 0)

Administrator

WebmasterWorld Administrator coopster is a WebmasterWorld Top Contributor of All Time 10+ Year Member

joined:July 31, 2003
posts:12533
votes: 0


Any passwords over 8 characters in length may not work as you expect. A related thread in which one member once asked about a possible htpasswd bug? [webmasterworld.com]