Re: Encrypted password patch

[Rick Macdonald]

On 24 Jun 2001, Milan Zamazal wrote:

> >>>>> "RM" == Rick Macdonald <address@hidden> writes:
> 
>     RM> If TkGnats is ever ported to GNATS v4, what does it need to
>     RM> support these encrypted passwords? An externally compiled C
>     RM> program?
> 
> You mean Tcl doesn't provide `crypt'?  Hm, then you can either require
> plain text passwords in the password files or use gnatsd or use the C
> external program.  I think it doesn't differ significantly from the
> current situation?

Perhaps I don't understand the whole issue.

Would TkGnats just send the plain text password to gnatsd, and gnatsd
would do the encryption/validation? That would be OK.

Does gnatsweb send clear text passwords to gnatsd or does it do something
better? I recall people complaining (a few years ago) not only of plain
text passwords in the gnatsd config but also the transfer of plain text
passwords to gnatsd as well.

...RickM...