Rev 702 | Go to most recent revision | Show entire file | Regard whitespace | Details | Blame | Last modification | View Log | RSS feed
| Rev 702 | Rev 711 | ||
|---|---|---|---|
| Line 262... | Line 262... | ||
| 262 | create accounts. |
262 | create accounts. |
| 263 | ATTENTION!!! If a pepper is used, then the |
263 | ATTENTION!!! If a pepper is used, then the |
| 264 | hashes are bound to that pepper. If you change the pepper, |
264 | hashes are bound to that pepper. If you change the pepper, |
| 265 | then ALL passwords of RAs become INVALID! |
265 | then ALL passwords of RAs become INVALID! |
| 266 | 266 | ||
| - | 267 | OIDplus::baseConfig()->getValue('RA_PASSWORD_PEPPER_ALGO','sha512'); |
|
| - | 268 | Old 2.0 format: (Not available) |
|
| - | 269 | The pepper is stored inside the base configuration file |
|
| - | 270 | It prevents that an attacker with SQL write rights can |
|
| - | 271 | create accounts. |
|
| - | 272 | ATTENTION!!! If a pepper is used, then the |
|
| - | 273 | hashes are bound to that pepper. If you change the pepper, |
|
| - | 274 | then ALL passwords of RAs become INVALID! |
|
| - | 275 | ||
| 267 | 276 | ||
| 268 | ---------------------------------------------------- |
277 | ---------------------------------------------------- |
| 269 | (4) LDAP FIELDS (see document ldap_installation.txt) |
278 | (4) LDAP FIELDS (see document ldap_installation.txt) |
| 270 | ---------------------------------------------------- |
279 | ---------------------------------------------------- |
| 271 | 280 | ||