comparison MoinMoin/config/__init__.py @ 5922:25900eaeb864

passlib integration - enhanced password hash security Docs for passlib: http://packages.python.org/passlib/ Updated docs/CHANGES about the moin integration. Updated docs/REQUIREMENTS about passlib requirements. Added/Adapted related unit tests. Added logging for password hash processing errors.
author Thomas Waldmann <tw AT waldmann-edv DOT de>
date Sat, 19 Jan 2013 00:32:21 +0100
parents 31c27d72ad9c
children
comparison
equal deleted inserted replaced
5920:fe7003b1cc4d 5922:25900eaeb864
19 'xml', 'python', 'perl', 'php', 'ruby', 'javascript', 19 'xml', 'python', 'perl', 'php', 'ruby', 'javascript',
20 'cplusplus', 'java', 'pascal', 'diff', 'gettext', 'xslt', 'creole', ) 20 'cplusplus', 'java', 'pascal', 'diff', 'gettext', 'xslt', 'creole', )
21 21
22 # When creating files, we use e.g. 0666 & config.umask for the mode: 22 # When creating files, we use e.g. 0666 & config.umask for the mode:
23 umask = 0770 23 umask = 0770
24
25 # list of acceptable password hashing schemes for cfg.password_scheme,
26 # here we only give reasonably good schemes, which is passlib (if we
27 # have passlib) and ssha (if we only have builtin stuff):
28 password_schemes_configurable = ['{PASSLIB}', '{SSHA}', ]
29
30 # ordered list of supported password hashing schemes, best (passlib) should be
31 # first, best builtin one should be second. this is what we support if we
32 # encounter it in user profiles:
33 password_schemes_supported = password_schemes_configurable + ['{SHA}', '{APR1}', '{MD5}', '{DES}', ]
24 34
25 # Default value for the static stuff URL prefix (css, img, js). 35 # Default value for the static stuff URL prefix (css, img, js).
26 # Caution: 36 # Caution:
27 # * do NOT use this directly, it is only the DEFAULT value to be used by 37 # * do NOT use this directly, it is only the DEFAULT value to be used by
28 # server Config classes and by multiconfig.py for request.cfg. 38 # server Config classes and by multiconfig.py for request.cfg.