diff --git a/cis/private/profile/change_password.php b/cis/private/profile/change_password.php new file mode 100644 index 000000000..66ae19e27 --- /dev/null +++ b/cis/private/profile/change_password.php @@ -0,0 +1,257 @@ + + * Alexander Nimmervoll + * + */ +require_once('../../../config/cis.config.inc.php'); +require_once('../../../include/functions.inc.php'); +require_once('../../../include/benutzer.class.php'); +require_once('../../../addons/ldap/vilesci/ldap.class.php'); +require_once('../../../include/phrasen.class.php'); +require_once('../../../include/Crypt_CHAP-1.5.0/CHAP.php'); + +$uid = get_uid(); +$db = new basis_db(); +$p = new phrasen(getSprache()); + +echo ' + + + + '.$p->t('passwort/Title').' + + + + +'; + +$benutzer = new benutzer(); +if(!$benutzer->load($uid)) + die('Benutzer nicht gefunden'); + +echo '

'.$p->t('passwort/PasswortAenderFuer',array($db->convert_html_chars($benutzer->vorname),$db->convert_html_chars($benutzer->nachname),$db->convert_html_chars($benutzer->uid))).'

'; + +if(!isset($_SERVER['HTTPS']) || (isset($_SERVER['HTTPS']) && $_SERVER['HTTPS']=='off')) +{ + + $httpspath = str_replace('http://','https://',APP_ROOT).'cis/private/profile/change_password.php'; + echo '
'.$p->t('passwort/NoHttps').'
+ '.$p->t('passwort/ZuHttpsWechseln').'

'; +} + +echo $p->t('passwort/InfotextPolicy').' +
+
+
+ + + + + + + + + + + + + + + + + +
'.$p->t('passwort/AltesPasswort').'
'.$p->t('passwort/NeuesPasswort').'
'.$p->t('passwort/PasswortWiederholung').'
 
+
'; + +if(isset($_POST['change'])) +{ + if(!isset($_POST['passwort_alt']) + || !isset($_POST['passwort_neu']) + || !isset($_POST['passwort_neu_check'])) + { + die('Fehlerhafte Parameteruebergabe'); + } + + $passwort_alt = $_POST['passwort_alt']; + $passwort_neu = $_POST['passwort_neu']; + $passwort_neu_check = $_POST['passwort_neu_check']; + + // Pruefen ob das neue Passwort uebereinstimmt + if($passwort_neu==$passwort_neu_check) + { + // Passwort Policy pruefen + if(($errormsg = check_policy($passwort_neu))===true) + { + // Passwort aendern + if(($msg = change_password($passwort_alt, $passwort_neu, $uid))===true) + { + echo ''.$p->t('passwort/AenderungOK').''.$msg.''; + } + } + else + { + echo ''.$p->t('passwort/AenderungFehler', array($errormsg)).''.$p->t('passwort/NichtUebereinstimmend').''; + } +} +echo ' +'; + +/** + * Prueft die Passwort Policy + * @param $passwort_neu das neue Passwort + * @return errormsg wenn Policy nicht erfuellt ist oder true wenn ok + */ +function check_policy($passwort_neu) +{ + global $p; + + // Prüfung des neuen Passwortes + $errormsg=''; + $error=false; + // Laenge mindestens 8 Zeichen + if(mb_strlen($passwort_neu)<8) + { + $error=true; + $errormsg .= $p->t('passwort/MinLaenge'); + } + + // Mindestens 1 Großbuchstabe + if(!preg_match('/[A-Z]/', $passwort_neu)) + { + $error=true; + $errormsg .=$p->t('passwort/Grossbuchstabe'); + } + // Mindestens 1 Kleinbuchstabe + if(!preg_match('/[a-z]/', $passwort_neu)) + { + $error=true; + $errormsg .=$p->t('passwort/Kleinbuchstabe'); + } + + // Mindestens 1 Ziffer + if(!preg_match('/[0-9]/', $passwort_neu)) + { + $error=true; + $errormsg .=$p->t('passwort/Ziffer'); + } + + // Keine Leerzeichen + if(strstr($passwort_neu, ' ')) + { + $error=true; + $errormsg .=$p->t('passwort/Leerzeichen'); + } + + // keine Umlaute + if(preg_match('/[ÄÖÜäöü]/', $passwort_neu)) + { + $error=true; + $errormsg .=$p->t('passwort/Umlaute'); + } + + // Sonderzeichen + if(!preg_match('/^(?=.*\d)(?=.*[A-Za-z])[0-9A-Za-z\-\$#\[\]\{\}!\(\)\.,\*:;_]{8,1024}$/', $passwort_neu)) + { + $error=true; + $errormsg.=$p->t('passwort/Sonderzeichen'); + } + + if($error) + return $errormsg; + else + return true; +} + +/** + * Aendert das Passwort im LDAP + * @param $passwort_alt Altes (aktuelles) Passwort + * @param $passwort_neu neues Passwort + * @param $uid UID + * @return true wenn erfolgreich sonst false + */ +function change_password($passwort_alt, $passwort_neu, $uid) +{ + $ldap = new ldap(); + + // Normalen Bind zum LDAP Server + if($ldap->connect()) + { + // DN des Users holen + if($user_dn = $ldap->GetUserDN($uid)) + { + $ldap->unbind(); + $ldap = new ldap(); + + // Bind des User mit alten Passwort + if($ldap->connect('starttls', LDAP_SERVER_MASTER, $user_dn, $passwort_alt)) + { + // Passwort verschlüsseln + //SSHA + $salt = substr(pack('H*',hash('sha1',substr(pack('h*',hash('md5',mt_rand())),0,8).$passwort_neu)),0,4); + $encrypted = base64_encode(pack('H*',hash('sha1',$passwort_neu.$salt)).$salt); + $ssha_password = '{SSHA}'.$encrypted; + + // LM und NT + $hash = new Crypt_CHAP_MSv2(); + $hash->password = $passwort_neu; + // $lm_password = strtoupper(bin2hex($hash->lmPasswordHash())); + $nt_password = strtoupper(bin2hex($hash->ntPasswordHash())); + + // Neues Passwort setzen + $data = array(); + $data['userPassword']=$ssha_password; + // $data['sambaLMPassword']=$lm_password; + $data['sambaNTPassword']=$nt_password; + $data['sambaPwdLastSet']=time(); + $data['sambaPwdMustChange']=2147483647; // 2038-01-19 04:14:07 + + if($ldap->Modify($user_dn, $data)) + return true; + else + return false; + } + else + { + return $ldap->errormsg; + } + } + else + { + return $ldap->errormsg; + } + } + else + { + return $ldap->errormsg; + } +} +?> diff --git a/config/cis.config-default.inc.php b/config/cis.config-default.inc.php index 55b96d298..f47e32a10 100644 --- a/config/cis.config-default.inc.php +++ b/config/cis.config-default.inc.php @@ -72,6 +72,9 @@ define("AUTH_NAME","Technikum-Wien"); // LDAP_SERVER: Adresse des LDAP Servers define("LDAP_SERVER","www.technikum-wien.at"); +// LDAP Master Server fuer Passwort Aenderungen +define('LDAP_SERVER_MASTER',LDAP_SERVER); +// LDAP BASIS DN fuer User define("LDAP_BASE_DN","ou=People, dc=technikum-wien, dc=at"); //User fuer LDAP BIND falls Authentifizierung noetig define("LDAP_BIND_USER",null); diff --git a/include/Crypt_CHAP-1.5.0/CHAP.php b/include/Crypt_CHAP-1.5.0/CHAP.php new file mode 100644 index 000000000..473433b9a --- /dev/null +++ b/include/Crypt_CHAP-1.5.0/CHAP.php @@ -0,0 +1,463 @@ + +All rights reserved. + +Redistribution and use in source and binary forms, with or without +modification, are permitted provided that the following conditions +are met: + +1. Redistributions of source code must retain the above copyright + notice, this list of conditions and the following disclaimer. +2. Redistributions in binary form must reproduce the above copyright + notice, this list of conditions and the following disclaimer in the + documentation and/or other materials provided with the distribution. +3. The names of the authors may not be used to endorse or promote products + derived from this software without specific prior written permission. + +THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND +ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED +WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. +IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, +INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, +BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, +DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY +OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING +NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, +EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. + +This code cannot simply be copied and put under the GNU Public License or +any other GPL-like (LGPL, GPL2) License. + + $Id: CHAP.php 302857 2010-08-28 21:12:59Z mbretter $ +*/ + +require_once 'PEAR.php'; + +/** +* Classes for generating packets for various CHAP Protocols: +* CHAP-MD5: RFC1994 +* MS-CHAPv1: RFC2433 +* MS-CHAPv2: RFC2759 +* +* @package Crypt_CHAP +* @author Michael Bretterklieber +* @access public +* @version $Revision: 302857 $ +*/ + +/** + * class Crypt_CHAP + * + * Abstract base class for CHAP + * + * @package Crypt_CHAP + */ +class Crypt_CHAP extends PEAR +{ + /** + * Random binary challenge + * @var string + */ + var $challenge = null; + + /** + * Binary response + * @var string + */ + var $response = null; + + /** + * User password + * @var string + */ + var $password = null; + + /** + * Id of the authentication request. Should incremented after every request. + * @var integer + */ + var $chapid = 1; + + /** + * Constructor + * + * Generates a random challenge + * @return void + */ + function Crypt_CHAP() + { + $this->PEAR(); + $this->generateChallenge(); + } + + /** + * Generates a random binary challenge + * + * @param string $varname Name of the property + * @param integer $size Size of the challenge in Bytes + * @return void + */ + function generateChallenge($varname = 'challenge', $size = 8) + { + $this->$varname = ''; + for ($i = 0; $i < $size; $i++) { + $this->$varname .= pack('C', 1 + mt_rand() % 255); + } + return $this->$varname; + } + + /** + * Generates the response. Overwrite this. + * + * @return void + */ + function challengeResponse() + { + } + +} + +/** + * class Crypt_CHAP_MD5 + * + * Generate CHAP-MD5 Packets + * + * @package Crypt_CHAP + */ +class Crypt_CHAP_MD5 extends Crypt_CHAP +{ + + /** + * Generates the response. + * + * CHAP-MD5 uses MD5-Hash for generating the response. The Hash consists + * of the chapid, the plaintext password and the challenge. + * + * @return string + */ + function challengeResponse() + { + return pack('H*', md5(pack('C', $this->chapid) . $this->password . $this->challenge)); + } +} + +/** + * class Crypt_CHAP_MSv1 + * + * Generate MS-CHAPv1 Packets. MS-CHAP doesen't use the plaintext password, it uses the + * NT-HASH wich is stored in the SAM-Database or in the smbpasswd, if you are using samba. + * The NT-HASH is MD4(str2unicode(plaintextpass)). + * You need the hash extension for this class. + * + * @package Crypt_CHAP + */ +class Crypt_CHAP_MSv1 extends Crypt_CHAP +{ + /** + * Wether using deprecated LM-Responses or not. + * 0 = use LM-Response, 1 = use NT-Response + * @var bool + */ + var $flags = 1; + + /** + * Constructor + * + * Loads the hash extension + * @return void + */ + function Crypt_CHAP_MSv1() + { + $this->Crypt_CHAP(); + $this->loadExtension('hash'); + } + + /** + * Generates the NT-HASH from the given plaintext password. + * + * @access public + * @return string + */ + function ntPasswordHash($password = null) + { + if (isset($password)) { + return pack('H*',hash('md4', $this->str2unicode($password))); + } else { + return pack('H*',hash('md4', $this->str2unicode($this->password))); + } + } + + /** + * Converts ascii to unicode. + * + * @access public + * @return string + */ + function str2unicode($str) + { + $uni = ''; + $str = (string) $str; + for ($i = 0; $i < strlen($str); $i++) { + $a = ord($str{$i}) << 8; + $uni .= sprintf("%X", $a); + } + return pack('H*', $uni); + } + + /** + * Generates the NT-Response. + * + * @access public + * @return string + */ + function challengeResponse() + { + return $this->_challengeResponse(); + } + + /** + * Generates the NT-Response. + * + * @access public + * @return string + */ + function ntChallengeResponse() + { + return $this->_challengeResponse(false); + } + + /** + * Generates the LAN-Manager-Response. + * + * @access public + * @return string + */ + function lmChallengeResponse() + { + return $this->_challengeResponse(true); + } + + /** + * Generates the response. + * + * Generates the response using DES. + * + * @param bool $lm wether generating LAN-Manager-Response + * @access private + * @return string + */ + function _challengeResponse($lm = false) + { + if ($lm) { + $hash = $this->lmPasswordHash(); + } else { + $hash = $this->ntPasswordHash(); + } + + while (strlen($hash) < 21) { + $hash .= "\0"; + } + + $td = mcrypt_module_open(MCRYPT_DES, '', MCRYPT_MODE_ECB, ''); + $iv = mcrypt_create_iv (mcrypt_enc_get_iv_size($td), MCRYPT_RAND); + $key = $this->_desAddParity(substr($hash, 0, 7)); + mcrypt_generic_init($td, $key, $iv); + $resp1 = mcrypt_generic($td, $this->challenge); + mcrypt_generic_deinit($td); + + $key = $this->_desAddParity(substr($hash, 7, 7)); + mcrypt_generic_init($td, $key, $iv); + $resp2 = mcrypt_generic($td, $this->challenge); + mcrypt_generic_deinit($td); + + $key = $this->_desAddParity(substr($hash, 14, 7)); + mcrypt_generic_init($td, $key, $iv); + $resp3 = mcrypt_generic($td, $this->challenge); + mcrypt_generic_deinit($td); + mcrypt_module_close($td); + + return $resp1 . $resp2 . $resp3; + } + + /** + * Generates the LAN-Manager-HASH from the given plaintext password. + * + * @access public + * @return string + */ + function lmPasswordHash($password = null) + { + $plain = isset($password) ? $password : $this->password; + + $plain = substr(strtoupper($plain), 0, 14); + while (strlen($plain) < 14) { + $plain .= "\0"; + } + + return $this->_desHash(substr($plain, 0, 7)) . $this->_desHash(substr($plain, 7, 7)); + } + + /** + * Generates an irreversible HASH. + * + * @access private + * @return string + */ + function _desHash($plain) + { + $key = $this->_desAddParity($plain); + $td = mcrypt_module_open(MCRYPT_DES, '', MCRYPT_MODE_ECB, ''); + $iv = mcrypt_create_iv (mcrypt_enc_get_iv_size($td), MCRYPT_RAND); + mcrypt_generic_init($td, $key, $iv); + $hash = mcrypt_generic($td, 'KGS!@#$%'); + mcrypt_generic_deinit($td); + mcrypt_module_close($td); + return $hash; + } + + /** + * Adds the parity bit to the given DES key. + * + * @access private + * @param string $key 7-Bytes Key without parity + * @return string + */ + function _desAddParity($key) + { + static $odd_parity = array( + 1, 1, 2, 2, 4, 4, 7, 7, 8, 8, 11, 11, 13, 13, 14, 14, + 16, 16, 19, 19, 21, 21, 22, 22, 25, 25, 26, 26, 28, 28, 31, 31, + 32, 32, 35, 35, 37, 37, 38, 38, 41, 41, 42, 42, 44, 44, 47, 47, + 49, 49, 50, 50, 52, 52, 55, 55, 56, 56, 59, 59, 61, 61, 62, 62, + 64, 64, 67, 67, 69, 69, 70, 70, 73, 73, 74, 74, 76, 76, 79, 79, + 81, 81, 82, 82, 84, 84, 87, 87, 88, 88, 91, 91, 93, 93, 94, 94, + 97, 97, 98, 98,100,100,103,103,104,104,107,107,109,109,110,110, + 112,112,115,115,117,117,118,118,121,121,122,122,124,124,127,127, + 128,128,131,131,133,133,134,134,137,137,138,138,140,140,143,143, + 145,145,146,146,148,148,151,151,152,152,155,155,157,157,158,158, + 161,161,162,162,164,164,167,167,168,168,171,171,173,173,174,174, + 176,176,179,179,181,181,182,182,185,185,186,186,188,188,191,191, + 193,193,194,194,196,196,199,199,200,200,203,203,205,205,206,206, + 208,208,211,211,213,213,214,214,217,217,218,218,220,220,223,223, + 224,224,227,227,229,229,230,230,233,233,234,234,236,236,239,239, + 241,241,242,242,244,244,247,247,248,248,251,251,253,253,254,254); + + $bin = ''; + for ($i = 0; $i < strlen($key); $i++) { + $bin .= sprintf('%08s', decbin(ord($key{$i}))); + } + + $str1 = explode('-', substr(chunk_split($bin, 7, '-'), 0, -1)); + $x = ''; + foreach($str1 as $s) { + $x .= sprintf('%02s', dechex($odd_parity[bindec($s . '0')])); + } + + return pack('H*', $x); + + } + + /** + * Generates the response-packet. + * + * @param bool $lm wether including LAN-Manager-Response + * @access private + * @return string + */ + function response($lm = false) + { + $ntresp = $this->ntChallengeResponse(); + if ($lm) { + $lmresp = $this->lmChallengeResponse(); + } else { + $lmresp = str_repeat ("\0", 24); + } + + // Response: LM Response, NT Response, flags (0 = use LM Response, 1 = use NT Response) + return $lmresp . $ntresp . pack('C', !$lm); + } +} + +/** + * class Crypt_CHAP_MSv2 + * + * Generate MS-CHAPv2 Packets. This version of MS-CHAP uses a 16 Bytes authenticator + * challenge and a 16 Bytes peer Challenge. LAN-Manager responses no longer exists + * in this version. The challenge is already a SHA1 challenge hash of both challenges + * and of the username. + * + * @package Crypt_CHAP + */ +class Crypt_CHAP_MSv2 extends Crypt_CHAP_MSv1 +{ + /** + * The username + * @var string + */ + var $username = null; + + /** + * The 16 Bytes random binary peer challenge + * @var string + */ + var $peerChallenge = null; + + /** + * The 16 Bytes random binary authenticator challenge + * @var string + */ + var $authChallenge = null; + + /** + * Constructor + * + * Generates the 16 Bytes peer and authentication challenge + * @return void + */ + function Crypt_CHAP_MSv2() + { + $this->Crypt_CHAP_MSv1(); + $this->generateChallenge('peerChallenge', 16); + $this->generateChallenge('authChallenge', 16); + } + + /** + * Generates a hash from the NT-HASH. + * + * @access public + * @param string $nthash The NT-HASH + * @return string + */ + function ntPasswordHashHash($nthash) + { + return pack('H*',hash('md4', $nthash)); + } + + /** + * Generates the challenge hash from the peer and the authenticator challenge and + * the username. SHA1 is used for this, but only the first 8 Bytes are used. + * + * @access public + * @return string + */ + function challengeHash() + { + return substr(pack('H*',hash('sha1', $this->peerChallenge . $this->authChallenge . $this->username)), 0, 8); + } + + /** + * Generates the response. + * + * @access public + * @return string + */ + function challengeResponse() + { + $this->challenge = $this->challengeHash(); + return $this->_challengeResponse(); + } +} + + +?> diff --git a/include/Crypt_CHAP-1.5.0/tests/Crypt_CHAP.phpt b/include/Crypt_CHAP-1.5.0/tests/Crypt_CHAP.phpt new file mode 100644 index 000000000..b2b8c2651 --- /dev/null +++ b/include/Crypt_CHAP-1.5.0/tests/Crypt_CHAP.phpt @@ -0,0 +1,119 @@ +--TEST-- +Crypt_CHAP: simple test +--SKIPIF-- + +--FILE-- + +All rights reserved. + +Redistribution and use in source and binary forms, with or without +modification, are permitted provided that the following conditions +are met: + +1. Redistributions of source code must retain the above copyright + notice, this list of conditions and the following disclaimer. +2. Redistributions in binary form must reproduce the above copyright + notice, this list of conditions and the following disclaimer in the + documentation and/or other materials provided with the distribution. +3. The names of the authors may not be used to endorse or promote products + derived from this software without specific prior written permission. + +THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND +ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED +WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. +IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, +INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, +BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, +DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY +OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING +NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, +EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. + +This code cannot simply be copied and put under the GNU Public License or +any other GPL-like (LGPL, GPL2) License. + + $Id: chaptest.php 231819 2007-03-14 07:39:07Z mbretter $ +*/ +chdir (dirname(__FILE__)); +if (file_exists('../CHAP.php')) { + require_once '../CHAP.php'; +} else { + require_once 'Crypt/CHAP.php'; +} + +echo "CHAP-MD5 TEST\n"; +$crpt = new Crypt_CHAP_MD5; +$crpt->password = 'MyPw'; +$crpt->chapid = 1; +$crpt->challenge = pack('H*', '102DB5DF085D3041'); +printf ("ChallResp : %s\n", bin2hex($crpt->challengeResponse())); +echo "\n"; + +echo "CHAP-MD5 TEST 2\n"; +$crpt = new Crypt_CHAP_MD5; +$crpt->password = 'sepp'; +$crpt->chapid = 1; +$crpt->challenge = pack('H*', '102DB5DF085D3041'); +printf ("ChallResp : %s\n", bin2hex($crpt->challengeResponse())); +echo "\n"; + +echo "MS-CHAPv1 str2unicode\n"; +$crpt = new Crypt_CHAP_MSv1; +printf("Passed 123 as Number:%s\n", bin2hex($crpt->str2unicode(123))); +printf("Passed 123 as String:%s\n", bin2hex($crpt->str2unicode('123'))); +echo "\n"; + +echo "MS-CHAPv1 TEST\n"; +$crpt->password = 'MyPw'; +$crpt->challenge = pack('H*', '102DB5DF085D3041'); +$unipw = $crpt->str2unicode($crpt->password); +printf ("Unicode PW: %s\n", bin2hex($unipw)); +printf ("NT HASH : %s\n", bin2hex($crpt->ntPasswordHash())); +printf ("NT Resp : %s\n", bin2hex($crpt->challengeResponse())); +printf ("LM HASH : %s\n", bin2hex($crpt->lmPasswordHash())); +printf ("LM Resp : %s\n", bin2hex($crpt->lmChallengeResponse())); +//printf ("Response : %s\nexpected : unknown\n", bin2hex($crpt->response())); +echo "\n"; + +echo "MS-CHAPv2 TEST\n"; +$crpt = new Crypt_CHAP_MSv2; +$crpt->username = 'User'; +$crpt->password = 'clientPass'; +printf ("Username : %s\n", bin2hex($crpt->username)); +$crpt->authChallenge = pack('H*', '5b5d7c7d7b3f2f3e3c2c602132262628'); +$crpt->peerChallenge = pack('H*', '21402324255E262A28295F2B3A337C7E'); +$nthash = $crpt->ntPasswordHash(); +printf ("NT HASH : %s\n", bin2hex($nthash)); +$nthashhash = $crpt->ntPasswordHashHash($nthash); +printf ("NT HASH-HASH : %s\n", bin2hex($nthashhash)); +printf ("ChallResp : %s\n", bin2hex($crpt->challengeResponse())); +printf ("Challenge : %s\n", bin2hex($crpt->challenge)); +echo "\n"; +?> +--EXPECT-- +CHAP-MD5 TEST +ChallResp : 8f028814450d66d94c72331ef455a172 + +CHAP-MD5 TEST 2 +ChallResp : d39bfaf5d6855a948c8c81a85947502c + +MS-CHAPv1 str2unicode +Passed 123 as Number:310032003300 +Passed 123 as String:310032003300 + +MS-CHAPv1 TEST +Unicode PW: 4d00790050007700 +NT HASH : fc156af7edcd6c0edde3337d427f4eac +NT Resp : 4e9d3c8f9cfd385d5bf4d3246791956ca4c351ab409a3d61 +LM HASH : 75ba30198e6d1975aad3b435b51404ee +LM Resp : 91881d0152ab0c33c524135ec24a95ee64e23cdc2d33347d + +MS-CHAPv2 TEST +Username : 55736572 +NT HASH : 44ebba8d5312b8d611474411f56989ae +NT HASH-HASH : 41c00c584bd2d91c4017a2a12fa59f3f +ChallResp : 82309ecd8d708b5ea08faa3981cd83544233114a3d85d6df +Challenge : d02e4386bce91226 + diff --git a/locale/de-AT/passwort.php b/locale/de-AT/passwort.php new file mode 100644 index 000000000..de2a77165 --- /dev/null +++ b/locale/de-AT/passwort.php @@ -0,0 +1,26 @@ +phrasen['passwort/Title']='Passwort ändern'; +$this->phrasen['passwort/PasswortAenderFuer']='Passwort ändern für User %s %s ( %s )'; +$this->phrasen['passwort/InfotextPolicy']='Das Passwort muss zumindest 8 Zeichen enthalten, davon mindestens 1 Großbuchstabe, +1 Kleinbuchstabe und eine Ziffer!

+Das Passwort darf keine Leerzeichen und Umlaute enthalten!
+Erlaubte Sonderzeichen sind: -$#[]{}!().,*:;_'; + +$this->phrasen['passwort/AltesPasswort']='Altes Passwort'; +$this->phrasen['passwort/NeuesPasswort']='Neues Passwort'; +$this->phrasen['passwort/PasswortWiederholung']='Wiederholung des neuen Passwort'; +$this->phrasen['passwort/PasswortAendern']='Passwort ändern'; +$this->phrasen['passwort/MinLaenge']='Das neue Passwort muss mindestens 8 Zeichen lang sein.'; +$this->phrasen['passwort/Grossbuchstabe']='Das neue Passwort muss mindestens einen Grossbuchstaben enthalten.'; +$this->phrasen['passwort/Kleinbuchstabe']='Das neue Passwort muss mindestens einen Kleinbuchstaben enthalten.'; +$this->phrasen['passwort/Ziffer']='Es muss mindestens eine Ziffer vorhanden sein.'; +$this->phrasen['passwort/Leerzeichen']='Es darf kein Leerzeichen im Passwort vorkommen.'; +$this->phrasen['passwort/Umlaute']='Es dürfen keine Umlaute verwendet werden.'; +$this->phrasen['passwort/Sonderzeichen']='Bitte verwenden Sie nur erlaubte Sonderzeichen'; +$this->phrasen['passwort/AenderungOK']='Das Passwort wurde erfolgreich geaendert'; +$this->phrasen['passwort/AenderungFehler']='Passwort Änderung fehlgeschlagen:%s'; +$this->phrasen['passwort/NichtUebereinstimmend']='Passwörter stimmen nicht überein'; +$this->phrasen['passwort/NoHttps']='ACHTUNG - Sie verwenden eine unverschlüsselte Verbindung. Sie sollten Ihr Passwort nur über eine verschlüsselte Verbindung ändern.'; +$this->phrasen['passwort/ZuHttpsWechseln']='Jetzt zu verschlüsselter Verbindung wechseln'; + +?> diff --git a/locale/en-US/passwort.php b/locale/en-US/passwort.php new file mode 100644 index 000000000..8e3de0224 --- /dev/null +++ b/locale/en-US/passwort.php @@ -0,0 +1,26 @@ +phrasen['passwort/Title']='Password Change'; +$this->phrasen['passwort/PasswortAenderFuer']='Password Change for User %s %s ( %s )'; +$this->phrasen['passwort/InfotextPolicy']='Das Passwort muss zumindest 8 Zeichen enthalten, davon mindestens 1 Großbuchstabe, +1 Kleinbuchstabe und eine Ziffer!

+Das Passwort darf keine Leerzeichen und Umlaute enthalten!
+Erlaubte Sonderzeichen sind: -$#[]{}!().,*:;_'; + +$this->phrasen['passwort/AltesPasswort']='old Password'; +$this->phrasen['passwort/NeuesPasswort']='new Password'; +$this->phrasen['passwort/PasswortWiederholung']='new Password'; +$this->phrasen['passwort/PasswortAendern']='change Password'; +$this->phrasen['passwort/MinLaenge']='Das neue Passwort muss mindestens 8 Zeichen lang sein.'; +$this->phrasen['passwort/Grossbuchstabe']='Das neue Passwort muss mindestens einen Grossbuchstaben enthalten.'; +$this->phrasen['passwort/Kleinbuchstabe']='Das neue Passwort muss mindestens einen Kleinbuchstaben enthalten.'; +$this->phrasen['passwort/Ziffer']='Es muss mindestens eine Ziffer vorhanden sein.'; +$this->phrasen['passwort/Leerzeichen']='Es darf kein Leerzeichen im Passwort vorkommen.'; +$this->phrasen['passwort/Umlaute']='Es dürfen keine Umlaute verwendet werden.'; +$this->phrasen['passwort/Sonderzeichen']='Bitte verwenden Sie nur erlaubte Sonderzeichen'; +$this->phrasen['passwort/AenderungOK']='Das Passwort wurde erfolgreich geaendert'; +$this->phrasen['passwort/AenderungFehler']='Passwort Änderung fehlgeschlagen:%s'; +$this->phrasen['passwort/NichtUebereinstimmend']='Passwörter stimmen nicht überein'; +$this->phrasen['passwort/NoHttps']='ACHTUNG - Sie verwenden eine unverschlüsselte Verbindung. Sie sollten Ihr Passwort nur über eine verschlüsselte Verbindung ändern.'; +$this->phrasen['passwort/ZuHttpsWechseln']='Jetzt zu verschlüsselter Verbindung wechseln'; + +?>