Passwords for users in gnatsd.access

Passwords for users in gnatsd.access

[Erwin, Richard D]

Folks;

I've figured out how to work the gnatsd.conf vs. gnatsd.access relationship, but I have a question.  

Has anybody set up things so that the gnats administrator doesn't know the existing passwords for users within gnatsd.access?  Ideally, I'd like to refer to our NFS server's password file, which has jumbled the passwords into something even we system administrator's don't know.  The users will want to use the same passwords for their general accounts, and I don't like having the passwords be as is within gnatsd.access and thus available to anyone who can crack the file.

Thanks,
Rich Erwin
Boeing SSG - M&CT Support
(425) 865-3414


_______________________________________________
Help-gnats mailing list
Help-gnats@gnu.org
http://mail.gnu.org/mailman/listinfo/help-gnats

Re: Passwords for users in gnatsd.access

[Dirk Schenkewitz]

Mr. Richard,

"Erwin, Richard D" schrieb:
> 
> Folks;
> 
> I've figured out how to work the gnatsd.conf vs. gnatsd.access relationship, but I have a question.
> 
> Has anybody set up things so that the gnats administrator doesn't know the existing passwords for users within gnatsd.access?  Ideally, I'd like to refer to our NFS server's password file, which has jumbled the passwords into something even we system administrator's don't know.  The users will want to use the same passwords for their general accounts, and I don't like having the passwords be as is within gnatsd.access and thus available to anyone who can crack the file.

I have configured Gnatsweb with full purpose WITHOUT passwords (thus letting everybody in) because I found no way to avoid the password being in clear-text in a cookie on the user's machine. I considered this to be even worse...
I know, that doesn't answer your question, I just want to say, under the given circumstances - try to live without passwords.

regards
	dirk
-- 
Dirk Schenkewitz 

InterFace AG                 fon: +49 (0)89 / 610 49 - 126
Leipziger Str. 16            fax: +49 (0)89 / 610 49 - 83
D-82008 Unterhaching         
http://www.interface-ag.de   mailto:dirk.schenkewitz@interface-ag.de


_______________________________________________
Help-gnats mailing list
Help-gnats@gnu.org
http://mail.gnu.org/mailman/listinfo/help-gnats