Re: [Zope] Re: PAS and md5 or crypt passwords

2006-10-16 Thread Robert (Jamie) Munro
Piotr Furman wrote: I've edited GMailAuthPlugin, renamed it MD5AuthPlugin, added that code and removed the google specific code. It doesn't give any errors, but it also doesn't let me log in. I've tried adding a line to log things, but that doesn't seem to be working either. Maybe You

Re: [Zope] Re: PAS and md5 or crypt passwords

2006-10-16 Thread Andrew Milton
+---[ Robert (Jamie) Munro ]-- [snip] | It's a pretty silly implementation, though. The point of hashing | passwords with MD5 or SHA1 is that if an attacker can read the password | files due to some kind of security leak, he still doesn't have the | passwords themselves,

[Zope] Re: PAS and md5 or crypt passwords

2006-10-16 Thread Tres Seaver
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Robert (Jamie) Munro wrote: Piotr Furman wrote: I've edited GMailAuthPlugin, renamed it MD5AuthPlugin, added that code and removed the google specific code. It doesn't give any errors, but it also doesn't let me log in. I've tried adding a line to

Re: [Zope] Re: PAS and md5 or crypt passwords

2006-10-12 Thread Robert (Jamie) Munro
Tres Seaver wrote: Robert (Jamie) Munro wrote: How do you use md5 passwords in PAS? I've got an SQL database already populated with usernames and md5 passwords from an old system that I am replacing - I don't have the cleartext passwords. You write an authentication plugin which takes the

Re: [Zope] Re: PAS and md5 or crypt passwords

2006-10-12 Thread Jens Vagelpohl
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 12 Oct 2006, at 14:03, Robert (Jamie) Munro wrote: I've edited GMailAuthPlugin, renamed it MD5AuthPlugin, added that code and removed the google specific code. It doesn't give any errors, but it also doesn't let me log in. I've tried adding a

[Zope] Re: PAS and md5 or crypt passwords

2006-10-12 Thread Piotr Furman
I've edited GMailAuthPlugin, renamed it MD5AuthPlugin, added that code and removed the google specific code. It doesn't give any errors, but it also doesn't let me log in. I've tried adding a line to log things, but that doesn't seem to be working either. Maybe You should take a look at

[Zope] Re: PAS and md5 or crypt passwords

2006-10-10 Thread Tres Seaver
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Robert (Jamie) Munro wrote: How do you use md5 passwords in PAS? I've got an SQL database already populated with usernames and md5 passwords from an old system that I am replacing - I don't have the cleartext passwords. You write an