Opened 14 years ago

Last modified 13 years ago

#132 closed defect

Switch the scripts auth code to using UNUSABLE_PASSWORD — at Version 1

Reported by: adehnert Owned by:
Priority: minor Milestone: Sometime
Component: Infrastructure Version:
Keywords: Cc:
Size: medium

Description (last modified by adehnert)

We have some issues that are ultimately caused by the scripts cert auth code using "ScriptsSSLAuth" as the password for users who auth using certs. Really, this should probably(?) be UNUSABLE_PASSWORD (from contrib/auth/hashers.py, in Django 1.4). We should change the auth code to set that as the password, and migrate current ScriptsSSLAuth passwords (and maybe empty string, see ASA-#133) to be UNUSABLE_PASSWORD instead.

See ​https://diswww.mit.edu/menelaus/asa-db/2131.

Change History (1)

comment:1 Changed 14 years ago by adehnert

  • Description modified (diff)
  • Summary changed from Consider adding ScriptsSSLAuth to PASSWORD_HASHERS to Switch the scripts auth code to using UNUSABLE_PASSWORD

I did some considering, so update the description and title to reflect the current state.

Last edited 14 years ago by adehnert (previous) (diff)
Note: See TracTickets for help on using tickets.