[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: Moving away from plain-text passwords in the server-side passwd file

From: Greg Hudson <ghudson_at_MIT.EDU>
Date: Wed, 21 May 2008 13:20:10 -0400

On Wed, 2008-05-21 at 12:40 -0400, Mark Phippard wrote:
> If the server does not know the plaintext password
> for a user then you cannot use CRAM-MD5 or DIGEST-MD5 auth mechanisms.

With DIGEST-MD5 it's possible for the server to know only an
intermediate hash of the password. Unfortunately, I don't think Cyrus
SASL supports that. (Not sure, though.)

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe_at_subversion.tigris.org
For additional commands, e-mail: dev-help_at_subversion.tigris.org
Received on 2008-05-22 17:11:41 CEST

This is an archived mail posted to the Subversion Dev mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.