[Serusers] Avoiding storing passwords in mysql "subscriber" table in clear-text

Jan Janak jan at iptel.org
Sat Oct 16 00:23:01 CEST 2004


Make sure that you have proper values in ha1 column (generated
automatically by serctl, if not then you can use gen_ha1 utility to
generate the hashes from plaintext password) and set:

modparam("auth_db", "calculate_ha1", no)
modparam("auth_db", "password_column", ha1)

  Jan.

On 12-10 00:12, karl wrote:
> Hi guys,
>  
> I would appreciate if someone may help me on the subject.  While still requiring users to be authenticated against user credentials (username, password, realm), on the other hand I want to avoid storing passwords in clear text in mysql "subscriber" table.  Any ideas?
>  
> Thank you in advanced.
>  
> Best regards,
>  
> Karl
> 
> 
> 
> 		
> ---------------------------------
> Do you Yahoo!?
> vote.yahoo.com - Register online to vote today!
> _______________________________________________
> Serusers mailing list
> serusers at lists.iptel.org
> http://lists.iptel.org/mailman/listinfo/serusers




More information about the sr-users mailing list