[dev] Auth/sql.php

Marko Djukic marko at oblo.com
Wed Jun 18 03:07:20 PDT 2003


what is the reason behind storing the encryption type with the password in
_encryptPassword()?

i've tweaked the cyrsql.php driver a bit to allow for different encryption
types, since pam_mysql that i use does not support md5. however, this then
stores the password as {crypt}$1$o1r.AuRQ$dzLTRXxLvbDJN which cyrus never
authenticates true because of the prefixed {crypt].

i'm sure there's a reason, although can't see one. ie: what's the situation
where one backend config, using one table, has different password encryption
for each record that we need to figure out how the password is encrypted?

i suppose an alternative is to place into _encryptPassword() an optional param
to say "don't prefix" passwords?

marko


More information about the dev mailing list