MV_NO_CRYPT — disable the use of password encryption server-wide
If configured, this variable disables the use
of crypt() function and/or MD5 password hashing server-wide.
Example: Enabling the MV_NO_CRYPT feature
Add the following to interchange.cfg:
Variable MV_NO_CRYPT 1
Interchange 4.8.0:
Source: lib/Vend/UserDB.pm (rev. 2.0.2.6 from Fri Jan 24 06:51:52 2003)
Line 306 (context shows lines 296-310 in new():251)
OLDPASS => $options{oldpass} || $CGI::values{mv_password_old} || '',
PASSWORD => $options{password} || $CGI::values{mv_password} || '',
VERIFY => $options{verify} || $CGI::values{mv_verify} || '',
NICKNAME => $options{nickname} || '',
PROFILE => $options{profile} || '',
LAST => '',
USERMINLEN => $options{userminlen} || 2,
PASSMINLEN => $options{passminlen} || 4,
CRYPT => defined $options{'crypt'}
? $options{'crypt'}
: ! $::Variable->{MV_NO_CRYPT},
CGI => ( defined $options{cgi} ? is_yes($options{cgi}) : 1),
PRESENT => { },
DB_ID => $options{database} || 'userdb',
OPTIONS => \%options,
Source: lib/Vend/Util.pm (rev. 2.1.2.14 from Mon Dec 15 22:25:30 2003)
Line 1350 (context shows lines 1340-1354 in check_authorization():1326)
$pwinfo =~ s/\s+$//;
my (%compare) = split /[\s:]+/, $pwinfo;
return undef unless $compare{$user};
$cmp_pw = $compare{$user};
undef $use_crypt if $Global::Variable->{MV_NO_CRYPT};
}
elsif( $user eq $Vend::Cfg->{RemoteUser} and
$Vend::Cfg->{Password} )
{
$cmp_pw = $Vend::Cfg->{Password};
undef $use_crypt if $::Variable->{MV_NO_CRYPT};
}
else {
$pwinfo = $Vend::Cfg->{UserDatabase} unless $pwinfo;
undef $use_crypt if $::Variable->{MV_NO_CRYPT};
Source: lib/Vend/Util.pm (rev. 2.1.2.14 from Mon Dec 15 22:25:30 2003)
Line 1354 (context shows lines 1344-1358 in check_authorization():1326)
undef $use_crypt if $Global::Variable->{MV_NO_CRYPT};
}
elsif( $user eq $Vend::Cfg->{RemoteUser} and
$Vend::Cfg->{Password} )
{
$cmp_pw = $Vend::Cfg->{Password};
undef $use_crypt if $::Variable->{MV_NO_CRYPT};
}
else {
$pwinfo = $Vend::Cfg->{UserDatabase} unless $pwinfo;
undef $use_crypt if $::Variable->{MV_NO_CRYPT};
$cmp_pw = Vend::Interpolate::tag_data($pwinfo, 'password', $user)
if defined $Vend::Cfg->{Database}{$pwinfo};
}