RConnection does not allow forcing plain text password explicitly (needed for hashed passwords)

s-u / REngine

General Java interface to R supporting multiple back-ends such as JRI and Rserve

Other

67 stars 47 forks source link

RConnection does not allow forcing plain text password explicitly (needed for hashed passwords) #32

Closed s-u closed 1 year ago

s-u commented 1 year ago

Rserve supports storing password in hashed form, but if that feature is used, login() has to send plain text password even if crypt-based passwords are supported. Currently, RConnection will always pick crypt-based authentication over plain text authentication if it is supported, but that is unable to authenticate against hashed passwords.

s-u commented 1 year ago

Added RConnection.login(user, pwd, true) to force plain-text login even if crypt-based authentication is available for hash-based password file.

WARNING: The CMD_login mechanism is only intended for legacy clients. Modern applications should use TLS encrypted communication either with OCAP mode and/or client certificate authentication.