[Rt-devel] Password storage format in RT3.6

[Arne Georg Gleditsch]

Jesse Vincent wrote:
> A patch would be much appreciated.

Appended.  Put together rather quickly, but I believe it to be sound. 
Obviously should be reviewed carefully anyway.

> Depends who you ask. A number of sites are using RT as an authentication 
> source for other services and rely on the fact that password storage is 
> or becomes MD5.

Hm, and they rely on this non-salted md5-format to be used?  I that case 
they'll be out of luck if we update the code to use salted md5 as well, 
since the format is different.

-- 

							Arne.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: md5-salt.patch
Type: text/x-patch
Size: 1775 bytes
Desc: not available
Url : http://lists.bestpractical.com/pipermail/rt-devel/attachments/20060808/dd862be8/md5-salt.bin