how password is stored and check the authentication??

jrefactors_at_hotmail.com
Date: 09/16/05 

Date: 16 Sep 2005 08:19:04 -0700

I want to ask how password is stored and how to check the
authentication?

I have heard password is never encrypted and decrypted, but it is
hashed.

For example, consider a simple email logon authentication in a hash
table:
Key: my email address
Value: hash_function(my plan text password)

The hash_function will hash my password to some number.

When I logon, it will have another function to do the reverse.

If (reverse_hash_function(the password I enter on the logon screen)
    == get_value(my email address))
Then Correct Password
Else Wrong Password

I don't know if this is correct. Please comment, and advise.

thanks!!

Relevant Pages

  • Re: What is a local logon?
    ... and a hash of your password to IIS. ... > impression that Basic Authentication is now a network, not a local, logon. ...
    (microsoft.public.windows.server.security)
  • Re: how password is stored and check the authentication??
    ... consider a simple email logon authentication in a hash ... > The hash_function will hash my password to some number. ... > Then Correct Password ... about security or encryption. ...
    (sci.crypt)
  • Re: Kerberos machine authentication - apparent authentication fail
    ... > until logon), the wireless connection can kick off when it is ready. ... > was confirmed in the server event logs with IAS (i set that up as the radius ... > as an ordinary user kicks in and takes over from the machine authentication. ... > while the network sorts itself out and a double click on a network link of ...
    (microsoft.public.windows.server.security)
  • Re: Kerberos machine authentication - apparent authentication fail
    ... as the case may be) which will delay authentication until ... I also have an Intel network adapter and WAP that does not have this> problem and even works well with 802.1X EAP-TLS for domain logon. ... In> most cases [ipsec a possible exception] kerberos authentication is not> needed to access domain resources as long as the client and server use a> common authentication method for lm/ntlm/ntlmv2. ... The main issue is to> NEVER include an ISP dns server in the preferred server list in the tcp/ip> properties or DHCP scope of any domain computer or any computer you want to> join to the domain in which case your computers may be trying to locate the> domain _srv records on the ISP dns server and fail. ...
    (microsoft.public.windows.server.security)
  • Re: Logon 529 Errors
    ... Authentication in SMTP virtual server. ... These are almost surely SMTP logon attempts, ... Caller User Name: DELLSERVER$ ...
    (microsoft.public.windows.server.sbs)
Quantcast