Re: [Firebird-devel] Initializing security database for first use

2012-01-03 Thread Alex Peshkoff
On 12/22/11 07:12, Doug Chamberlin wrote: Why limit it to so little? Make the limit 1KB or 2KB to encourage pass phrases instead of passwords. Full sentences that are meaningful to the person are WAY better protection than complex passwords. Currently (fb3) firebird does not artificially

Re: [Firebird-devel] Initializing security database for first use

2012-01-02 Thread Dimitry Sibiryakov
02.01.2012 1:38, Steve Friedl wrote: On Sun, Jan 01, 2012 at 08:14:56PM -0400, W O wrote: Right, but it take more time for type them and the probability of mistakes grows. Sure, but if long passwords are allowed, people have a choice as to their own tradeoff of security -vs- convenience.

Re: [Firebird-devel] Initializing security database for first use

2012-01-01 Thread Doug Chamberlin
Why limit it to so little? Make the limit 1KB or 2KB to encourage pass phrases instead of passwords. Full sentences that are meaningful to the person are WAY better protection than complex passwords. On 12/21/11 4:19 PM, W O wrote: Just 8 letters for a password seems to me very short. It is

Re: [Firebird-devel] Initializing security database for first use

2012-01-01 Thread W O
Right, but it take more time for type them and the probability of mistakes grows. Greetings. Walter. On Wed, Dec 21, 2011 at 11:12 PM, Doug Chamberlin chamberlin.d...@gmail.com wrote: Why limit it to so little? Make the limit 1KB or 2KB to encourage pass phrases instead of passwords.

Re: [Firebird-devel] Initializing security database for first use

2012-01-01 Thread Steve Friedl
On Sun, Jan 01, 2012 at 08:14:56PM -0400, W O wrote: Right, but it take more time for type them and the probability of mistakes grows. Sure, but if long passwords are allowed, people have a choice as to their own tradeoff of security -vs- convenience. If only short passwords are allowed,

Re: [Firebird-devel] Initializing security database for first use

2011-12-22 Thread Alex Peshkoff
On 12/21/11 19:11, Paul Reeves wrote: BTW, will the default be masterkey or masterke? That's different things now. Are you saying that if the default is set to masterke and the user types masterkey that the login will fail? And the same with typing masterke when the password is

Re: [Firebird-devel] Initializing security database for first use

2011-12-21 Thread Alex Peshkoff
On 12/20/11 22:04, Dmitry Yemanov wrote: 20.12.2011 18:22, Paul Reeves wrote: o Add a checkbox that allows a user to keep SYSDBA/masterkey. Default will be unchecked. If unchecked then next screen will ask user to enter new password. This gets my vote. Just one idea. May be not

Re: [Firebird-devel] Initializing security database for first use

2011-12-21 Thread Alex Peshkoff
On 12/20/11 18:31, Paul Reeves wrote: On Tuesday 20 December 2011 at 14:20 Alex Peshkoff wrote: Next, for ZIP install people will have to run gsec first time manually. That is not desirable. In fact when I wrote my previous reply I was just thinking about the UI of the installer.

Re: [Firebird-devel] Initializing security database for first use

2011-12-21 Thread Paul Reeves
On Wednesday 21 December 2011 at 12:29 Alex Peshkoff wrote: Writing batch file is not a problem. But I do not know why is it needed when all what you need is to gsec -add sysdba -pw %new_password% Don't forget we are talking about windows users here :-) (g,d r). A lot of them will not

Re: [Firebird-devel] Initializing security database for first use

2011-12-21 Thread Alex Peshkoff
On 12/21/11 15:51, Paul Reeves wrote: On Wednesday 21 December 2011 at 12:29 Alex Peshkoff wrote: Writing batch file is not a problem. But I do not know why is it needed when all what you need is to gsec -add sysdba -pw %new_password% Don't forget we are talking about windows users here

Re: [Firebird-devel] Initializing security database for first use

2011-12-21 Thread Dimitry Sibiryakov
21.12.2011 12:59, Alex Peshkoff wrote: And what about ZIP - may I ask, how does it work now? I've thought that people at least need to register themselves windows service after opening archive. Am I wrong? For regular users - no, but developers used to use FB server in application mode.

Re: [Firebird-devel] Initializing security database for first use

2011-12-21 Thread Alex Peshkoff
On 12/21/11 16:02, Dimitry Sibiryakov wrote: 21.12.2011 12:59, Alex Peshkoff wrote: And what about ZIP - may I ask, how does it work now? I've thought that people at least need to register themselves windows service after opening archive. Am I wrong? For regular users - no, but developers

Re: [Firebird-devel] Initializing security database for first use

2011-12-21 Thread Philippe Makowski
Alex Peshkoff [2011-12-21 13:07] : Sorry - may be my question was not enough precise. Does our zip archive contains something (batch file) that helps with further install after unzipping files? yes

Re: [Firebird-devel] Initializing security database for first use

2011-12-21 Thread Paul Reeves
On Wednesday 21 December 2011 at 12:26 Alex Peshkoff wrote: Just one idea. May be not check box, but radio box with 3 choices That is a possibility. I think the final decision will depend partly on the architecture of innosetup and the logic of the order of the screens. BTW, will the

[Firebird-devel] Initializing security database for first use

2011-12-20 Thread Alex Peshkoff
Till today we always used to provide security database pre-configured for use with single record for SYSDBA with masterke(y) password. In FB3 we have at least two reasons to stop use that schema: - having masterkey as default preset-ted SYSDBA's password is security vulnerability cause people are

Re: [Firebird-devel] Initializing security database for first use

2011-12-20 Thread Adriano dos Santos Fernandes
On 20/12/2011 11:20, Alex Peshkoff wrote: I wonder is it possible to change windows installer to initialize security database. Next, for ZIP install people will have to run gsec first time manually. Are this changes OK for us? I don't think it is, specially for zip. I think bind the server

Re: [Firebird-devel] Initializing security database for first use

2011-12-20 Thread Alex Peshkoff
On 12/20/11 17:26, Adriano dos Santos Fernandes wrote: On 20/12/2011 11:20, Alex Peshkoff wrote: I wonder is it possible to change windows installer to initialize security database. Next, for ZIP install people will have to run gsec first time manually. Are this changes OK for us? I don't

Re: [Firebird-devel] Initializing security database for first use

2011-12-20 Thread Adriano dos Santos Fernandes
On 20/12/2011 11:41, Alex Peshkoff wrote: On 12/20/11 17:26, Adriano dos Santos Fernandes wrote: On 20/12/2011 11:20, Alex Peshkoff wrote: I wonder is it possible to change windows installer to initialize security database. Next, for ZIP install people will have to run gsec first time

Re: [Firebird-devel] Initializing security database for first use

2011-12-20 Thread Paul Reeves
On Tuesday 20 December 2011 at 14:20 Alex Peshkoff wrote: I wonder is it possible to change windows installer to initialize security database. It is possible, but I'm not sure it is practical or desirable. It would be interesting to know what percentage of deployments are for development