Re: [LANdb] Proposed login system

> weez> Well, no matter what user the script/server is run as, you've
> weez> got a potential problem, unless this is a dedicated machine,
> weez> or there's some way of configuring the server to run as one
> weez> user for 'this set of scripts' and another one elsewhere.
>
> You can with suexec.  This is how user-cgi programs are run in user
> public_html directories.

Excellent.

I've got most of the system written, I've just got a few details to touch
up.  Then I'll put together the function ID system and the actual user
manager.


> I would imagine MD5 might also be more secure than DES, which Crypt uses.
> Red Hat Linux has built-in support for MD5 passwords in /etc/shadow for
> this reason.

Good.  I've installed MD5, and I've been using it for what I've written.  It
isn't quite as simple to use as crypt, as you can't just go md5($string)..
have to use handles, but it's no big deal for security.  With suexec, it
oughta be pretty tight anyway.

Thanks..

John




-------------------------------------
LANdb - The Network Management Database
To unsubscribe, send email to landb-request@avenir.dhs.org
	and put 'unsubscribe' in the subject line
Administrative contact: weez@avenir.dhs.org
-------------------------------------