Ryan Roth wrote:
> Can we change to this?
>
> http://sourceforge.net/tracker/index.php?func=detail&aid=1623854&group_id=46652&atid=446898
I must admit I'm a bit dubious about security on a freevo box, I guess
it all comes down to how people use freevo.
If your unhappy with the current method you can always use stunnel and
certificates, this would prevent plain text password going over the
network.
A better solution for the password is to keep the same method as we have
but replace the 'freevo' password with: { 'freevo' : ('md5',
'c30e34fbaa8de764a6376eb1b10a7307') },
{ 'freevo' : ('crypt', ('bba2MX1hDX8JQ', 'bb')) } or
{ 'freevo' : 'freevo' }
(New in python 2.5 is hashlib, better hashes)
This would minimise the changes and still keep it easy for people who
don't need secure passwords. I don't see much difference between using
local_conf.py and a separate file for passwords. You don't have to have
local_conf.py as world readable.
If you want to do a patch for this, then I would be more than happy to
apply it.
Duncan
> Duncan Webb wrote:
>> Ryan Roth wrote:
>>
>>> Has the way you set the WWW users changed in the SVN version? I seem to
>>> be having trouble getting a username and password to work.
>>>
>> WWW_USERS = { 'freevo' : 'freevo' } still works.
>>
>> Duncan
>>
>>
>> -------------------------------------------------------------------------
>> Take Surveys. Earn Cash. Influence the Future of IT
>> Join SourceForge.net's Techsay panel and you'll get the chance to share your
>> opinions on IT & business topics through brief surveys - and earn cash
>> http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
>> _______________________________________________
>> Freevo-users mailing list
>> Freevo-users@lists.sourceforge.net
>> https://lists.sourceforge.net/lists/listinfo/freevo-users
>>
>>
>
> -------------------------------------------------------------------------
> Take Surveys. Earn Cash. Influence the Future of IT
> Join SourceForge.net's Techsay panel and you'll get the chance to share your
> opinions on IT & business topics through brief surveys - and earn cash
> http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
> _______________________________________________
> Freevo-users mailing list
> Freevo-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/freevo-users
>
-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Freevo-users mailing list
Freevo-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/freevo-users
