encrypting password in gnatsweb cookies (was Re: gnatsweb patch)

[Robert Abatecola]

The password encryption patch I wrote was for a beta version of 
gnatsweb 2.5.  It was not updated for any later versions because the 
authors of gnatsweb considered the patch too large for a feature that 
only a few people seemed to be interested in.  It also required a 
couple of additional perl packages.  That's my understanding of why 
my patch was never integrated directly into gnatsweb (Ken, correct me 
if I'm wrong).

As I've said in the past, if there is enough interest in I'd be glad 
to do an updated patch.

As for encrypting passwords in gnatsd.access, that's something I have 
never tried to address.  I would also much rather see encrypted 
passwords in this file.


At 5:40 PM +0530 10/9/00, parimala wrote:
> Hello,
>
> In one of the bug reports you have told that you had written a 
> gnatsweb patch to encrypt the password before sending it back in the 
> cookie.  If you have that patch, will you please send it?
>
> Also is it possible to specify a encrypted password in gnatsd.access 
> file so that no can access other user's password?
> (Now it is specified as cleartext in gnatsd.access file)
>
> Timely help is greately appreciated.
>
> Thanks in advance
--

 -------------------------------------------------------------------
 Robert Abatecola       | Internet Connectivity, VPN, DSL, ISDN,
 The Stradivarian Group | Low Cost Web Hosting, Network Consulting,
 (408) 257-4482         | Software Development, Database Development,
 robert@tsgus.com       | Mac OS/UNIX/Linux/Windows, Sys Admin, DBA
 -------------------------------------------------------------------