search

davideuler / gss

Automatically exported from code.google.com/p/gss
Other
0 stars 0 forks source link

webdav authentication #119

Open GoogleCodeExporter opened 8 years ago

GoogleCodeExporter commented 8 years ago 
Is there possibility to alter webdav functionality so that user password could 
be used for webdav, instead of separate password for webdav?

Regards,
Nikola

Original issue reported on code.google.com by ngara...@gmail.com on 24 Feb 2012 at 11:37

GoogleCodeExporter commented 8 years ago 
Separate password for webdav is needed because the server does not know the 
real password due to the third-party authentication that is used (Shiboleth)

Original comment by chstath on 24 Feb 2012 at 11:47

GoogleCodeExporter commented 8 years ago 
As long as you use shibboleth authentication no, since gss has no access to the 
password. In the first versions we have been using the gss auth token as the 
webdav password, not a good solution since the token expires periodically. Thus 
the current version uses a separate password that never expires (until the user 
resets it via the web client).

Original comment by f.stamat...@ebs.gr on 24 Feb 2012 at 11:51

GoogleCodeExporter commented 8 years ago 
Is there any way to md5 hash passwords into the database and use user password? 
Will this work?

Original comment by ngara...@gmail.com on 24 Feb 2012 at 12:26

GoogleCodeExporter commented 8 years ago 
Yes. If you have a password field (that you update in any way) then you can 
have webdav authenticate against it.

Original comment by f.stamat...@ebs.gr on 24 Feb 2012 at 1:19