[ 
https://issues.apache.org/jira/browse/COUCHDB-2725?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14597406#comment-14597406
 ] 

ASF subversion and git services commented on COUCHDB-2725:
----------------------------------------------------------

Commit b1a958bea4086aedd90b163607b1996abc1405d6 in couchdb-couch's branch 
refs/heads/2725-configurable-password-scheme from [~rnewson]
[ https://git-wip-us.apache.org/repos/asf?p=couchdb-couch.git;h=b1a958b ]

Configurable password scheme

This gives the administrator control over which algorithm is used to
hash passwords and a separate control over whether this happens on
successful authentication or only at password change time.

closes COUCHDB-2725


> Configurable password scheme
> ----------------------------
>
>                 Key: COUCHDB-2725
>                 URL: https://issues.apache.org/jira/browse/COUCHDB-2725
>             Project: CouchDB
>          Issue Type: New Feature
>      Security Level: public(Regular issues) 
>            Reporter: Robert Newson
>
> Currently, couchdb will upgrade any "simple" password hash (the one pass, 
> salted sha1 algorithm) to "pbkdf2" on the next successful authentication, and 
> will use the new scheme for new passwords or on password change.
> Make this configurable so that administrators of large sites can roll out the 
> upgrade gradually.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to