SVN authentication issues
[email protected] (Gwynne Raskind)
| Newsgroups | svn.migration |
|---|---|
| Message-ID | <[email protected]> |
So in investigating my options for converting the old passwd file to an Apache digest authentication file, I found a problem... there is no option for that. The passwords are stored as old-style crypt(), but the digest format wants MD5's. Please, please don't tell me how crypt() supports MD5, I'm very aware of that, but the crypt()ed passwords we currently have are NOT MD5 and thus not usable for Digest authentication regardless. Options: - Force people to make new passwords, or log in with their old ones on master, and use Digest auth. I'm personally in favor of this, since it gives the opportunity to prune old accounts. - Use Basic auth. People keep their existing passwords, but it sends passwords in basically cleartext over the network. I don't like this, but it's simpler. Please discuss. -- Gwynne, Daughter of the Code "This whole world is an asylum for the incurable."