SVN authentication issues

[email protected] (Gwynne Raskind)
Newsgroups svn.migration
Message-ID <[email protected]>
So in investigating my options for converting the old passwd file to  
an Apache digest authentication file, I found a problem... there is no  
option for that. The passwords are stored as old-style crypt(), but  
the digest format wants MD5's. Please, please don't tell me how  
crypt() supports MD5, I'm very aware of that, but the crypt()ed  
passwords we currently have are NOT MD5 and thus not usable for Digest  
authentication regardless.

Options:

- Force people to make new passwords, or log in with their old ones on  
master, and use Digest auth. I'm personally in favor of this, since it  
gives the opportunity to prune old accounts.

- Use Basic auth. People keep their existing passwords, but it sends  
passwords in basically cleartext over the network. I don't like this,  
but it's simpler.

Please discuss.

-- Gwynne, Daughter of the Code
"This whole world is an asylum for the incurable."
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.