[Postfixadmin-devel] Default encryption method

[Christian B. <pos...@cb...>]

Hello,

Am Sonntag, 18. November 2007 schrieb 
chr...@us...:
> Revision: 234

> config.inc.php:
> - listed "md5" for $CONF['encrypt']

> Modified: trunk/config.inc.php
> ===================================================================
> --- trunk/config.inc.php	2007-11-18 19:27:46 UTC (rev 233)
> +++ trunk/config.inc.php	2007-11-18 21:43:10 UTC (rev 234)
> @@ -80,6 +80,7 @@
>  // Encrypt
>  // In what way do you want the passwords to be crypted?
>  // md5crypt = internal postfix admin md5
> +// md5 = md5 sum of the password
>  // system = whatever you have set as your PHP system default
>  // cleartext = clear text passwords (ouch!)
>  $CONF['encrypt'] = 'md5crypt';

While reading the commit message, I noticed that the default value 
is "md5crypt". I'm not sure if this is a good idea - I don't even know 
if (or how) Postfix supports this...

Should we change the default? If yes, to what?

And: how to avoid breakage on existing installations?
For example, I only override some settings in config.local.php and let 
everything else in config.inc.php unchanged. This means I use the SVN 
version of config.inc.php and have some fun when a default changes...


Regards,

Christian Boltz
-- 
Btw. in general my plan is:
* Release AlphaN 
* Break everything;-) (I mean: put new stuff in that could be broken)
* Stabilize again in time for our AlphaNplus (after two weeks)
* Stabilize furthr for the next public Alpha
[Andreas Jaeger in opensuse-factory]