Re: [Firebird-devel] Initializing security database for first use

2012-01-03 Thread Alex Peshkoff
On 12/22/11 07:12, Doug Chamberlin wrote: > Why limit it to so little? Make the limit 1KB or 2KB to encourage pass > phrases instead of passwords. > > Full sentences that are meaningful to the person are WAY better > protection than complex passwords. Currently (fb3) firebird does not artificiall

Re: [Firebird-devel] Initializing security database for first use

2012-01-02 Thread Dimitry Sibiryakov
02.01.2012 1:38, Steve Friedl wrote: > On Sun, Jan 01, 2012 at 08:14:56PM -0400, W O wrote: >> > Right, but it take more time for type them and the probability of mistakes >> > grows. > Sure, but if long passwords are allowed, people have a choice as to their > own tradeoff of security -vs- conve

Re: [Firebird-devel] Initializing security database for first use

2012-01-01 Thread Steve Friedl
On Sun, Jan 01, 2012 at 08:14:56PM -0400, W O wrote: > Right, but it take more time for type them and the probability of mistakes > grows. Sure, but if long passwords are allowed, people have a choice as to their own tradeoff of security -vs- convenience. If only short passwords are allowed, Fireb

Re: [Firebird-devel] Initializing security database for first use

2012-01-01 Thread W O
Right, but it take more time for type them and the probability of mistakes grows. Greetings. Walter. On Wed, Dec 21, 2011 at 11:12 PM, Doug Chamberlin wrote: > Why limit it to so little? Make the limit 1KB or 2KB to encourage pass > phrases instead of passwords. > > Full sentences that are m

Re: [Firebird-devel] Initializing security database for first use

2012-01-01 Thread Doug Chamberlin
Why limit it to so little? Make the limit 1KB or 2KB to encourage pass phrases instead of passwords. Full sentences that are meaningful to the person are WAY better protection than complex passwords. On 12/21/11 4:19 PM, W O wrote: > Just 8 letters for a password seems to me very short. > > It is

Re: [Firebird-devel] Initializing security database for first use

2011-12-22 Thread Alex Peshkoff
On 12/21/11 16:16, Philippe Makowski wrote: > Alex Peshkoff [2011-12-21 13:07] : >> Sorry - may be my question was not enough precise. Does our zip archive >> contains something (batch file) that helps with further install after >> unzipping files? >> > yes > > https://firebird.svn.sourceforge.ne

Re: [Firebird-devel] Initializing security database for first use

2011-12-22 Thread Alex Peshkoff
On 12/21/11 19:11, Paul Reeves wrote: > >> BTW, will the default be masterkey or masterke? That's different things >> now. > Are you saying that if the default is set to masterke and the user types > masterkey that the login will fail? And the same with typing masterke when > the > password is

Re: [Firebird-devel] Initializing security database for first use

2011-12-22 Thread Alex Peshkoff
On 12/22/11 01:19, W O wrote: > Just 8 letters for a password seems to me very short. > Certainly. > It is very difficult to establish until 16 letters? Not trivial - but will be done in FB3. In this thread we are discussing details of this feature :) -

Re: [Firebird-devel] Initializing security database for first use

2011-12-21 Thread W O
Just 8 letters for a password seems to me very short. It is very difficult to establish until 16 letters? Greetings. Walter. On Wed, Dec 21, 2011 at 11:11 AM, Paul Reeves wrote: > On Wednesday 21 December 2011 at 12:26 Alex Peshkoff wrote: > > > Just one idea. May be not check box, but radi

Re: [Firebird-devel] Initializing security database for first use

2011-12-21 Thread Paul Reeves
On Wednesday 21 December 2011 at 12:26 Alex Peshkoff wrote: > Just one idea. May be not check box, but radio box with 3 choices That is a possibility. I think the final decision will depend partly on the architecture of innosetup and the logic of the order of the screens. > BTW, will the defa

Re: [Firebird-devel] Initializing security database for first use

2011-12-21 Thread Philippe Makowski
Alex Peshkoff [2011-12-21 13:07] : > Sorry - may be my question was not enough precise. Does our zip archive > contains something (batch file) that helps with further install after > unzipping files? > yes https://firebird.svn.sourceforge.net/svnroot/firebird/firebird/branches/B2_5_Release/build

Re: [Firebird-devel] Initializing security database for first use

2011-12-21 Thread Alex Peshkoff
On 12/21/11 16:02, Dimitry Sibiryakov wrote: > 21.12.2011 12:59, Alex Peshkoff wrote: >> And what about ZIP - may I ask, how does it work now? I've thought that >> people at least need to register themselves windows service after >> opening archive. Am I wrong? >For regular users - no, but dev

Re: [Firebird-devel] Initializing security database for first use

2011-12-21 Thread Dimitry Sibiryakov
21.12.2011 12:59, Alex Peshkoff wrote: > And what about ZIP - may I ask, how does it work now? I've thought that > people at least need to register themselves windows service after > opening archive. Am I wrong? For regular users - no, but developers used to use FB server in application mode.

Re: [Firebird-devel] Initializing security database for first use

2011-12-21 Thread Alex Peshkoff
On 12/21/11 15:51, Paul Reeves wrote: > On Wednesday 21 December 2011 at 12:29 Alex Peshkoff wrote: > >> Writing batch file is not a problem. >> But I do not know why is it needed when all what you need is to >> >> gsec -add sysdba -pw %new_password% >> > Don't forget we are talking about windows

Re: [Firebird-devel] Initializing security database for first use

2011-12-21 Thread Paul Reeves
On Wednesday 21 December 2011 at 12:29 Alex Peshkoff wrote: > > Writing batch file is not a problem. > But I do not know why is it needed when all what you need is to > > gsec -add sysdba -pw %new_password% > Don't forget we are talking about windows users here :-) (g,d & r). A lot of them wi

Re: [Firebird-devel] Initializing security database for first use

2011-12-21 Thread Alex Peshkoff
On 12/20/11 18:31, Paul Reeves wrote: > On Tuesday 20 December 2011 at 14:20 Alex Peshkoff wrote: > >> Next, for ZIP install people will have to run gsec >> first time manually. > > That is not desirable. > > In fact when I wrote my previous reply I was just thinking about the UI of > the > ins

Re: [Firebird-devel] Initializing security database for first use

2011-12-21 Thread Alex Peshkoff
On 12/20/11 22:04, Dmitry Yemanov wrote: > 20.12.2011 18:22, Paul Reeves wrote: > >> o Add a checkbox that allows a user to keep SYSDBA/masterkey. >> Default will be unchecked. If unchecked then next screen will ask >> user to enter new password. > This gets my vote. Just one idea. May

Re: [Firebird-devel] Initializing security database for first use

2011-12-20 Thread Dmitry Yemanov
20.12.2011 18:22, Paul Reeves wrote: > o Add a checkbox that allows a user to keep SYSDBA/masterkey. > Default will be unchecked. If unchecked then next screen will ask > user to enter new password. This gets my vote. Dmitry ---

Re: [Firebird-devel] Initializing security database for first use

2011-12-20 Thread Paul Reeves
On Tuesday 20 December 2011 at 14:20 Alex Peshkoff wrote: > Next, for ZIP install people will have to run gsec > first time manually. That is not desirable. In fact when I wrote my previous reply I was just thinking about the UI of the installer. Once the information has been collected the in

Re: [Firebird-devel] Initializing security database for first use

2011-12-20 Thread Paul Reeves
On Tuesday 20 December 2011 at 14:20 Alex Peshkoff wrote: > I wonder is it possible to change windows installer to initialize > security database. It is possible, but I'm not sure it is practical or desirable. It would be interesting to know what percentage of deployments are for developmen

Re: [Firebird-devel] Initializing security database for first use

2011-12-20 Thread Adriano dos Santos Fernandes
On 20/12/2011 11:41, Alex Peshkoff wrote: > On 12/20/11 17:26, Adriano dos Santos Fernandes wrote: >> On 20/12/2011 11:20, Alex Peshkoff wrote: >>> I wonder is it possible to change windows installer to initialize >>> security database. Next, for ZIP install people will have to run gsec >>> first

Re: [Firebird-devel] Initializing security database for first use

2011-12-20 Thread Alex Peshkoff
>>> to run gsec >>> first time manually. Let me notice that any tool, using services to manage security database and not adding explicit localhost: will be OK, including 'isql -user sysdba employee' with 'CREATE USER ...' in it. --

Re: [Firebird-devel] Initializing security database for first use

2011-12-20 Thread Alex Peshkoff
On 12/20/11 17:26, Adriano dos Santos Fernandes wrote: > On 20/12/2011 11:20, Alex Peshkoff wrote: >> I wonder is it possible to change windows installer to initialize >> security database. Next, for ZIP install people will have to run gsec >> first time manually. Are this changes OK for us? >> >>

Re: [Firebird-devel] Initializing security database for first use

2011-12-20 Thread Adriano dos Santos Fernandes
On 20/12/2011 11:20, Alex Peshkoff wrote: > > I wonder is it possible to change windows installer to initialize > security database. Next, for ZIP install people will have to run gsec > first time manually. Are this changes OK for us? > > I don't think it is, specially for zip. I think bind the se