Re: everything....

[Aaron Turner <aturner@linuxkb.org>]

On Thu, 16 Dec 1999, Micah K Yoder wrote:

[snip]

> This RAPI stuff looks quite cool.  I might well be interested in working
> on that sort of thing after usertools.  Depends on what else there is. 
> I'm definitely a bit more interested in building standalone apps these
> days (I'm a bit Web-ed out at work) so that might be just the ticket. 
> GNOME, KDE front ends... ahhh....  but first things first.

Well talk to Hugo- it's his baby.  But if you're interested in
contributing to the GNOME and KDE projects to integrate our site into
their help tools, great!

> Also a question about passwords.  I know we talked about converting
> passwords to crypt() a while back, and agreed to do it.  Does everyone
> else's code reference passwords that way, or is anyone still using
> mysql's PASSWORD() function?  If you're still using that, CHANGE IT! 
> :-)

Currently, all the passwords in the DB are using the MySQL PASSWORD func,
and there is no conversion to crypt() possible.  In phpMyAdmin, there
isn't an option for using crypt(), so I don't know if this is possible.
Regardless, before we convert over to crypt, we need a full set of admin
tools to maintain the passwords.

But you can convert from password() to crypt().  Just chop off the last
character in the encrypted password string.  At least that's how I got
AuthenDBI.pm to work with the password() encrypted passwords.  I read the
encrypted password from the DB, chop the last character, and encrypt the
password the user typed with crypt() and then compare the two.  Seems to
do the job.

I think for the alpha, we should just plan on PASSWORD() which if you know
SQL you can determine anyways (at the time I didn't).  If we want to go
live on the 1st, I don't think converting over right now is a good idea.

--
Aaron Turner, Core Developer       http://vodka.linuxkb.org/~aturner/
Linux Knowledge Base Organization  http://linuxkb.org/
Because world domination requires quality open documentation.
aka: aturner@vicinity.com, aturner@pobox.com, ion_beam_head@ashtech.net