Re: mod_authn_dbd and apr_password_validate

[Patrick Welche]

On Mon, Jan 08, 2007 at 09:10:52PM +0000, Nick Kew wrote:
> On Mon, 8 Jan 2007 16:08:51 +0000
> Patrick Welche <[EMAIL PROTECTED]> wrote:
> 
> 
> > so what sort of password does apr_password_validate accept?
> 
> Those created with htpasswd is a simple answer.

Would the following patch be acceptable? (So that one has a clue on how
to populate the database.)

Cheers,

Patrick

Index: mod_authn_dbd.xml
===================================================================
--- mod_authn_dbd.xml   (revision 494830)
+++ mod_authn_dbd.xml   (working copy)
@@ -111,6 +111,17 @@
     <example>
     AuthDBDUserPWQuery "SELECT password FROM authn WHERE username = %s"
     </example>
+    <p>If using <code>DBDriver pgsql</code> and given a PostgreSQL
+    database with the pgcrypto contrib module loaded, password
+    encryptions accepted by mod_authn_db include
+    <code>
+    crypt(plaintext_password,gen_salt('md5'))
+    </code>
+    and
+    <code>
+    '{SHA}'||encode(digest(plaintext_password,'sha1'),'base64')
+    </code>
+    </p>
     <p>If httpd was built against apr v1.3.0 or higher, any additional
     columns specified in the select statement will be inserted into
     the environment with the name <code>AUTHENTICATE_&lt;COLUMN&gt;</code>.