[ refdb-Feature Requests-2783033 ] enigma encryption optional

Feature Requests item #2783033, was opened at 2009-04-28 19:42
Message generated for change (Comment added) made by mhoenicka
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=385994&aid=2783033&group_id=26091

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: refdbd
Group: None
>Status: Closed
Priority: 5
Private: No
Submitted By: Torsten Bronger (bronger)
Assigned to: Markus Hoenicka (mhoenicka)
Summary: enigma encryption optional

Initial Comment:
Please make encryption of the password optional.

Rationale: Often (if not mostly), RefDB is connected from localhost only, therefore, there is no transmission over an unstrusted network.  Since the algorithm is non-standard, you have to implement it for every client implementation.  Unless of course you use eenc which is an unnecessary dependency for your client package.  If it wasn't for the sake of compatibility, I'd even request to remove it entirely:  Tunneling through ssh or using openssl is the way to go, and easy enough.

----------------------------------------------------------------------

>Comment By: Markus Hoenicka (mhoenicka)
Date: 2009-04-29 23:28

Message:
I've added a command line switch (-x) and configure options (no_encrypt for
the clients, no_decrypt for the server) to use plain-text passwords. The
default is still to use encrypted passwords, but if you know what you're
doing you can now switch off encryption. Needless to say, both server and
clients must use the same setting in order to cooperate properly.

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=385994&aid=2783033&group_id=26091

------------------------------------------------------------------------------
Register Now & Save for Velocity, the Web Performance & Operations 
Conference from O'Reilly Media. Velocity features a full day of 
expert-led, hands-on workshops and two days of sessions from industry 
leaders in dedicated Performance & Operations tracks. Use code vel09scf 
and Save an extra 15% before 5/3. http://p.sf.net/sfu/velocityconf