Re: [Savannah-hackers] GNATS host?

[Hugo Gayosso]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Jeff Bailey <address@hidden> writes:

> "It works now" is a bad assumption.  The reason most people don't
> use the GNU Gnats (say that 3 times fast!) system is that it's not
> very nice to work with.

Actually it is very useful, but it requires some training (as any
other tool), and some discipline (don't forget to close those
tickets!!).

I have implemented it at work, and after some time using it for one
area, it will be implemented in other areas as well.


> I have been splitting things into multiple databases,

I definitely agree with this.


> and will probably need to hack Gnats a little bit to make it do what
> I want.

Just don't tweak it a lot, we want to stay as "apt-gettable" as
possible.


> The hardest part is going to be smooth authentication/authorization
> between savannah and gnats.  Probably initially, you'll need to have
> a "What is your gnats password", with an explanation that it's
> totally insecure so please choose a different password.

BOFH rule #1 (or whatever number you want): Never trust a user.

Besides:

<http://sources.redhat.com/ml/gnats-devel/2001-q1/msg00017.html>

New feature: Encrypted gnatsd passwords

    * To: GNATS Development Mailing List <gnats-devel at sourceware dot cygnus 
dot com>
    * Subject: New feature: Encrypted gnatsd passwords
    * From: Milan Zamazal <pdm at zamazal dot org>
    * Date: 29 Jan 2001 22:43:30 +0100

[I'm generally not going to add any new features before GNATS 4 is
released.  However some missing features can be considered being bugs
which should be fixed.]

I added support for MD5 encrypted passwords in gnatsd.access, based on a
patch by Tommi Virtanen.  Now you can use passwords prefixed with `$1$'
there, see the documentation of `crypt' in the GNU libc manual for more
details about the form of such passwords.  Passwords prefixed with $0$
are exact match passwords.  Other passwords remain the same as before,
i.e. case sensitive wild card match passwords.

Milan Zamazal



- -- 
Hugo Gayosso
Support the Free Software
Support the GNU Project 
http://www.gnu.org
http://wildebeest.penguinpowered.com
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.4 (GNU/Linux)
Comment: Processed by Mailcrypt 3.5.5 and Gnu Privacy Guard 
<http://www.gnupg.org/>

iD8DBQE6kcSeMNObVRBZveYRAuMVAKCAYdgt86FIsfDwxW6cyBVfQC+P4ACdEKes
IjO/ZrDQzp3lPeOOt9kQn30=
=g17A
-----END PGP SIGNATURE-----