mysql - 带有 Auth Query 的 mod_dbd 处理 MD5 和 salt 不起作用

Question

运行 centOS 7.5、mysql 8、php 7.2、apache 2.4.6尝试让 mysql 身份验证为我使用的 php 应用程序工作，该应用程序将其密码存储为 md5(md5('通过').salt)

我已经确认加载了正确的模块(如果需要可以提供列表)

密码不匹配[auth_basic:error] [pid 5195] [client 10.10.10.111:49234] AH01617: 用户 ecourt: "/central"的身份验证失败: 密码不匹配

这是/etc/httpd/conf.d 目录中我的 central.conf 文件中的代码

# mod_dbd configuration
# UPDATED to include authentication cacheing
DBDriver mysql
DBDParams "host=localhost dbname=bb user=userU pass=somepass"

DBDMin  4
DBDKeep 8
DBDMax  20
DBDExptime 300

<Directory "/webroot/test/www/central">
  # mod_authn_core and mod_auth_basic configuration
  # for mod_authn_dbd
  AuthType Basic
  AuthName "central login" 

  # To cache credentials, put socache ahead of dbd here
  AuthBasicProvider socache dbd

  # Also required for caching: tell the cache to cache dbd lookups!
  AuthnCacheProvideFor dbd
  AuthnCacheContext my-server

  # mod_authz_core configuration
  Require valid-user
  # Require group 10 8 6

   # mod_authn_dbd SQL query to authenticate a user
   #AuthDBDUserPWQuery "SELECT password FROM user WHERE username = %s"
   AuthDBDUserPWQuery "SELECT MD5(MD5(password) + 'salt') AS password FROM     user WHERE username = %s"

</Directory>

任何帮助表示赞赏。谢谢

Answer 1

'salt' 是一个字符串('单引号')，也许您指的是列 `salt`(`backticks`)？

见:

• Using backticks around field names
• https://dev.mysql.com/doc/refman/8.0/en/identifiers.html