Thread: Authentication
View Single Post

  #1 (permalink)  
Old 08-04-2005
Matthias P. Wuerfl
 
Posts: n/a
Default Authentication

Hello!

I want to setup cram_md5 authentication in future. By now i only have
plain authentication. Future password-changes will leave the clear
password in the database. By now in my database i only have the crypted
passwords.

Cram_md5 needs the clear password (right?). If i set up cram_md5 the
server will announce this ability to the clients (right?), these will
choose it (right?) and they can not log in (right?).

How can i solve the problem:
- move to cram_md5 slowly?
- activate/offer cram_md5 while not every password is here in clear

Thanks for help

Matthias

Reply With Quote