Re: [SVN-MIGRATION] SVN authentication issues

On Dec 14, 2008, at 4:22 PM, Gwynne Raskind wrote:

> So in investigating my options for converting the old passwd file to  
> an Apache digest authentication file, I found a problem... there is  
> no option for that. The passwords are stored as old-style crypt(),  
> but the digest format wants MD5's. Please, please don't tell me how  
> crypt() supports MD5, I'm very aware of that, but the crypt()ed  
> passwords we currently have are NOT MD5 and thus not usable for  
> Digest authentication regardless.
>
> Options:
>
> - Force people to make new passwords, or log in with their old ones  
> on master, and use Digest auth. I'm personally in favor of this,  
> since it gives the opportunity to prune old accounts.
>
> - Use Basic auth. People keep their existing passwords, but it sends  
> passwords in basically cleartext over the network. I don't like  
> this, but it's simpler.
>
> Please discuss.

Is doing BasicAuth over SSL an option?  That keeps everything from  
being sent in clear text w/o forcing everyone to setup a new account.

-T