Re: [Gnumed-devel] Managing staff (user accounts)

[Karsten Hilbert]

> … when creating a new user in GNUmed client
> 
> - is the password stored encrypted

 ALTER USER ... PASSWORD ENCRYPTED ...

> - where in GNUmed is the encryption defined

The function gm.create_user() duly applies the ENCRYPTED keyword.

The actual encryption method is PostgreSQL business.

> (since I am gathering that the
> setting in pg_hba.conf merely instructs what to use to authenticate an
> offered password against the stored value) ?

MD5, yes. Actually, the password isn't really stored anywhere. Only
its (salted) hash.

> - do postgres extensions like what is available here need to be installed

no

> if SHA-1 is to be supported, and would the GNUmed client 0.9x support that?

That's got nothing to do with GNUmed.

Karsten
-- 
Empfehlen Sie GMX DSL Ihren Freunden und Bekannten und wir
belohnen Sie mit bis zu 50,- Euro! https://freundschaftswerbung.gmx.de