[Serusers] Avoiding storing passwords in mysql "subscriber" tablein clear-text

[karl]

Hello Steve,
 
Thanks for your feedback.
 
Actually, as suggested by Antonio from another mail, I have already tried adding the following modparam statements in the ser.cfg file:
 
modparam("auth_db", "calculate_ha1", 0)
modparam("auth_db", "password_column", "ha1")

 
.... and their effect is such that user authentication makes use of the hashed password in the "ha1" password column created during user creation using "serctl add" command.

On the other hand, what I am really after is that on user creation using serctl add command, the password column "password" is not left in plain text.  Is this possible? or is it still required for SerWeb authentication?
 
 
Thanks
 
Karl


Steve Blair <blairs at isc.upenn.edu> wrote:
I seem to remember that one of the parameters in the modparam 
statement for the
auth module will determine if passwords are stored in clear text or 
encrypted. I am
away from my office, and system, right now and cannot confirm this. 
Check the auth
module documentation perhaps the answer is there.

Dave Bath wrote:

> Karl,
>
> 
>
> You could try using radius authentication. Just google the archives 
> for some docs on how to use it.
>
> 
>
> Dave
>
> 
>
> ------------------------------------------------------------------------
>
> *From:* serusers-bounces at iptel.org [mailto:serusers-bounces at lists.iptel.org] 
> *On Behalf Of *karl
> *Sent:* 12 October 2004 08:13
> *To:* serusers at lists.iptel.org
> *Subject:* [Serusers] Avoiding storing passwords in mysql "subscriber" 
> tablein clear-text
>
> 
>
> Hi guys,
>
> 
>
> I would appreciate if someone may help me on the subject. While still 
> requiring users to be authenticated against user credentials 
> (username, password, realm), on the other hand I want to avoid storing 
> passwords in clear text in mysql "subscriber" table. Any ideas?
>
> 
>
> Thank you in advanced.
>
> 
>
> Best regards,
>
> 
>
> Karl
>
> ------------------------------------------------------------------------
>
> Do you Yahoo!?
> vote.yahoo.com - Register online to vote today!
>
>------------------------------------------------------------------------
>
>_______________________________________________
>Serusers mailing list
>serusers at lists.iptel.org
>http://lists.iptel.org/mailman/listinfo/serusers
> 
>

_______________________________________________
Serusers mailing list
serusers at lists.iptel.org
http://lists.iptel.org/mailman/listinfo/serusers


__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.sip-router.org/pipermail/sr-users/attachments/20041015/c24f67eb/attachment.htm>