[rt-users] What's the *Maximum* password length in RT?

[Schultz, Eric]

Right, I jumped the gun :-) 

-----Original Message-----
From: Todd Chapman [mailto:todd at chaka.net] 
Sent: Monday, June 26, 2006 12:32 PM
To: Schultz, Eric
Cc: Joshua Colson; Philip Kime; rt-users at lists.bestpractical.com
Subject: Re: [rt-users] What's the *Maximum* password length in RT?

On Mon, Jun 26, 2006 at 12:19:39PM -0700, Schultz, Eric wrote:
> It's the max length of the field in the database :-)  This is by
default
> 40, as Joshua mentioned.
> 

No. 40 is the length of the MD5 hash. The password can basically
be as long as you want. Just because the hashed password
is 40 characters loing doesn't mean you only get 40 characters 
of security.