Re: [Phpgroupware-developers] md5 question

[Chris Weiss]

ok, i don't understand how this thing is supposed to work.  Any password storage
system worth it weight in peanuts will have non-reversable encryption.  why on
earth would they make a "standard" that only works when the password on the 
server
is stored in plain text?  I think we're missing sonething here, or maybe syncml 
is
missing something.

Guillaume Courtois (address@hidden) wrote*:
>
>>The password stored in phpgw is non-reversable so you can't get at it unless 
>>the
>>user types it in.  Maybe an alternative would be to md5 the login string when 
>>the
>>user configures syncing and store that for the syncml auth.
>
>Hum, that's a possibility but that would not be very "syncml-compliant" ... :)
>
>>
>>Guillaume Courtois (address@hidden) wrote*:
>>>
>>>Hello all,
>>>
>>>A little question for you : the API seems to support the MD5-coded password, 
>>>but
>>only the password. The problem is that a syncml client can send a MD5-coded
string,
>>but containing username:password:nonce.
>>>
>>>So, is there a way to have a function that authenticates a session using a 
>>>single
>>string, or is there a function that can give you the password of a user based 
>>on
>>his username ?
>>>
>>>Thanks !
>>>
>>>
>>>
>>>_______________________________________________
>>>Phpgroupware-developers mailing list
>>>address@hidden
>>>http://mail.gnu.org/mailman/listinfo/phpgroupware-developers
>>>
>>
>>
>>
>>_______________________________________________
>>Phpgroupware-developers mailing list
>>address@hidden
>>http://mail.gnu.org/mailman/listinfo/phpgroupware-developers
>>
>
>
>
>_______________________________________________
>Phpgroupware-developers mailing list
>address@hidden
>http://mail.gnu.org/mailman/listinfo/phpgroupware-developers
>