nss-mysql-users
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: [Nss-mysql-users] MD5 passwords


From: Gary W. Smith
Subject: RE: [Nss-mysql-users] MD5 passwords
Date: Tue, 6 Jun 2006 22:15:07 -0700

Clay, 

You can correct me if I'm wrong but from the standpoint of NSS it
doesn't care.  If the passwords match the request and the encryption of
the request then that is all that really matters.

When we were playing around with it we left the passwords in plain text
in our testing/play environment.  NSS didn't care.  

pam-mysql cares on the other hand.  It will encrypt the password in the
method specified and try to match it to what's in the DB.  If it doesn't
match then you have a problem.  So that means if you use MD5 in the DB
then pam-mysql needs to use MD5 as well.  

If you were really talented then you could roll your own password method
on both ends.  

Gary Wayne Smith


> -----Original Message-----
> From: address@hidden
[mailto:nss-
> address@hidden On Behalf Of Clay
> Loveless
> Sent: Tuesday, June 06, 2006 4:22 PM
> To: address@hidden
> Subject: [Nss-mysql-users] MD5 passwords
> 
> Hi,
> 
> It looks like this question has been asked once or twice before, but
> I'm not 100% clear on the answer.
> 
> Is it possible to store passwords in the user table as MD5 hashes
> instead of using MySQL's PASSWORD() function?
> 
> Thank you!
> -Clay
> 
> --
> Killersoft.com
> 
> 
> 
> 
> 
> _______________________________________________
> Nss-mysql-users mailing list
> address@hidden
> http://lists.nongnu.org/mailman/listinfo/nss-mysql-users




reply via email to

[Prev in Thread] Current Thread [Next in Thread]