Authentication
Hello!
I want to setup cram_md5 authentication in future. By now i only have
plain authentication. Future password-changes will leave the clear
password in the database. By now in my database i only have the crypted
passwords.
Cram_md5 needs the clear password (right?). If i set up cram_md5 the
server will announce this ability to the clients (right?), these will
choose it (right?) and they can not log in (right?).
How can i solve the problem:
- move to cram_md5 slowly?
- activate/offer cram_md5 while not every password is here in clear
Thanks for help
Matthias
|