Re: [Fedora-directory-users] boot time startup requires password

2005-07-08 Thread Kevin Myer
Quoting Brian Jones <[EMAIL PROTECTED]>: Thanks, Kevin. Can I make a feature request to whoever sees this that is way better at Java/C than me to at least make the stored password crypted in something stronger than rot13? Just my opinion, but its kind of moot what format its stored in, as lo

Re: [Fedora-directory-users] boot time startup requires password

2005-07-08 Thread Rich Megginson
Brian Jones wrote: Thanks, Kevin. Can I make a feature request to whoever sees this that is way better at Java/C than me to at least make the stored password crypted in something stronger than rot13? What would you suggest?  Note that a determined attacker will be able to decode anythi

Re: [Fedora-directory-users] boot time startup requires password

2005-07-08 Thread Rich Megginson
Kevin Myer wrote: http://www.redhat.com/docs/manuals/dir-server/ag/intro.htm#39523 NB: you trade the ease of startup with a security risk, in that your keyphrase is stored in a file cleartext. Right. Very secure environments invest in hardware crypto devices/dongles that provide this fun

Re: [Fedora-directory-users] boot time startup requires password

2005-07-08 Thread Brian Jones
Thanks, Kevin. Can I make a feature request to whoever sees this that is way better at Java/C than me to at least make the stored password crypted in something stronger than rot13? On 7/8/05, Kevin Myer <[EMAIL PROTECTED]> wrote: > http://www.redhat.com/docs/manuals/dir-server/ag/intro.htm#395

Re: [Fedora-directory-users] boot time startup requires password

2005-07-08 Thread Kevin Myer
http://www.redhat.com/docs/manuals/dir-server/ag/intro.htm#39523 NB: you trade the ease of startup with a security risk, in that your keyphrase is stored in a file cleartext. Kevin Quoting Brian Jones <[EMAIL PROTECTED]>: Hi all. I hit a snag yesterday when I rebooted my directory server

[Fedora-directory-users] boot time startup requires password

2005-07-08 Thread Brian Jones
Hi all. I hit a snag yesterday when I rebooted my directory server box (running RHEL 4). The problem is that I'm using SSL/TLS, and that means that every time I restart the directory server I have to provide the password for the certificate database. Now, I *know* that this would never stand in a