[dev] Auth/sql.php
Marko Djukic
marko at oblo.com
Wed Jun 18 03:07:20 PDT 2003
what is the reason behind storing the encryption type with the password in
_encryptPassword()?
i've tweaked the cyrsql.php driver a bit to allow for different encryption
types, since pam_mysql that i use does not support md5. however, this then
stores the password as {crypt}$1$o1r.AuRQ$dzLTRXxLvbDJN which cyrus never
authenticates true because of the prefixed {crypt].
i'm sure there's a reason, although can't see one. ie: what's the situation
where one backend config, using one table, has different password encryption
for each record that we need to figure out how the password is encrypted?
i suppose an alternative is to place into _encryptPassword() an optional param
to say "don't prefix" passwords?
marko
More information about the dev
mailing list