MiniVend Akopia Services

[Date Prev][Date Next][Thread Prev][Thread Next][Minivend by date ][Minivend by thread ]

How to encrypt user-passwords in UserDB



******    message to minivend-users from "Gideon van Gelder" <gideon@swingmaster.nl>     ******

Hello everybody,

--Quoting Mike Heins:

"Because of that, I figured I should do a rework of the UserDB password
situation and they are now encrypted by default in the demo.  If enough
people feel strongly about this I will add the Variable MV_NO_CRYPT 1
as the default."

I use Minivend 3.11. When I look into userdb.gdbm, I can read all the users'
passwords.
Is there any way to encrypt these by default ? I guess, with the current
condition, if someone gets to read the userdb, he can go ahead and login as
an existing user and take advantage of an account.

B.T.W.: has anyone gotten MV to work with PGP 5.0 on a Unix system ?

Thanks very much in advance.

-Gideon van Gelder


-
To unsubscribe from the list, DO NOT REPLY to this message.  Instead, send
email with 'UNSUBSCRIBE minivend-users' in the body to Majordomo@minivend.com.
Archive of past messages: http://www.minivend.com/minivend/minivend-list


Search for: Match: Format: Sort by: