[jira] [Commented] (COUCHDB-2725) Configurable password scheme

["ASF subversion and git services (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/COUCHDB-2725?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14597406#comment-14597406 ] 

ASF subversion and git services commented on COUCHDB-2725:
----------------------------------------------------------

Commit b1a958bea4086aedd90b163607b1996abc1405d6 in couchdb-couch's branch refs/heads/2725-configurable-password-scheme from [~rnewson]
[ https://git-wip-us.apache.org/repos/asf?p=couchdb-couch.git;h=b1a958b ]

Configurable password scheme

This gives the administrator control over which algorithm is used to
hash passwords and a separate control over whether this happens on
successful authentication or only at password change time.

closes COUCHDB-2725


> Configurable password scheme
> ----------------------------
>
>                 Key: COUCHDB-2725
>                 URL: https://issues.apache.org/jira/browse/COUCHDB-2725
>             Project: CouchDB
>          Issue Type: New Feature
>      Security Level: public(Regular issues) 
>            Reporter: Robert Newson
>
> Currently, couchdb will upgrade any "simple" password hash (the one pass, salted sha1 algorithm) to "pbkdf2" on the next successful authentication, and will use the new scheme for new passwords or on password change.
> Make this configurable so that administrators of large sites can roll out the upgrade gradually.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)