diff docs/REQUIREMENTS @ 5922:25900eaeb864

passlib integration - enhanced password hash security Docs for passlib: http://packages.python.org/passlib/ Updated docs/CHANGES about the moin integration. Updated docs/REQUIREMENTS about passlib requirements. Added/Adapted related unit tests. Added logging for password hash processing errors.
author Thomas Waldmann <tw AT waldmann-edv DOT de>
date Sat, 19 Jan 2013 00:32:21 +0100
parents 0fd330339378
children 82ad863c255e
line wrap: on
line diff
--- a/docs/REQUIREMENTS	Fri Jan 18 01:46:13 2013 +0100
+++ b/docs/REQUIREMENTS	Sat Jan 19 00:32:21 2013 +0100
@@ -19,6 +19,9 @@
 Python requirements might be different for (linux or other) distribution
 packages, depending on the werkzeug version they use. Usually you do not have
 to care then, because the package maintainer already did it for you.
+You also can't use the stronger password hashes provided by passlib as it
+requires at least python 2.5 and you need to disable it in your wiki config,
+so moin does not try to use it.
 
 Python 3.x won't work for MoinMoin for now.
 
@@ -98,6 +101,17 @@
 
 A) Stuff below MoinMoin/support/:
 
+passlib (password hashing library)
+==================================
+shipped: 1.6.1
+minimum: 1.3(?)
+
+Note: moin could work without passlib also (NOT RECOMMENDED), but would not
+support stronger password hashes then, also would not be able to process such
+hashes from existing user profiles (that were made with passlib) and also
+would be less secure due to the weaker builtin hash methods.
+
+
 flup (cgi/fastcgi/scgi/ajp to WSGI adapter)
 ===========================================
 shipped: 1.0.2+, from repo: hg clone -r 8d52f88effa3 http://hg.saddi.com/flup-server