[Repoze-dev] [issue85] Repoze.who should support salted hashes for the sqlauthenticator

2009-05-29 Thread Douglas Mayle
Douglas Mayle doug...@mayle.org added the comment: Any comments for me? Anything I need to do to get this accepted? I think it's pretty thorough, but I'm open to any criticism... __ Repoze Bugs b...@bugs.repoze.org http://bugs.repoze.org/issue85

[Repoze-dev] [issue85] Repoze.who should support salted hashes for the sqlauthenticator

2009-05-29 Thread Chris McDonough
Chris McDonough chr...@plope.com added the comment: Hi Douglas, Sorry for not responding til now; the worthwhile patches always require more thought than plain bugreports. Thanks for the submission! (FTR, I tried to apply the patch but it has a syntax error on line 267. That was easy to fix,

[Repoze-dev] more security headscratching

2009-05-29 Thread Chris McDonough
The last time I wrote a missive about BFG security pluggability, I talked about breaking the existing security policy into two things: an authentication policy and an authorization policy and put some code up to show how that could be done. So, that's now done and on the trunk (which will become