IUS, NSAPI and Passwords
Posted in 1997
Does anyone know how to provide an encrypted password mechanism between NSAPI in Netscape Enterprise Server 2 and IUS 9.12 with Webblade 3.30.UC4. Currently, the obj.conf file contains: <Object name="secure"> AuthTrans fn="basic-auth" userdb="/opt/cgi-bin/web.cnf" userfn="informix_auth" auth-type="basic" PathCheck fn="require-auth" realm="Secure" auth-type="basic" Service filename="/opt/cgi-bin/web.cnf" fn="informix_explode" method="(GET|POST)" </Object> The web.cnf file (/opt/cgi-bin/web.cnf) contains: MIusertable webUsers MIusername name MIuserpasswd password MIuserlevel security_level MIpagelevel read_level which is the default from Informix. The password checking uses an un-encrypted password check, so the webUsers table contains a list of userids and their associated passwords for all to see !!! Is it possible to either: a) store encrypted passwords in the database and still have NSAPI validate it correctly, OR b) pass out to UNIX (Sun Solaris in this case) to validate the userid and password, but still get variable such as REMOTE_USER? set, etc. Cheers, Rick. -- Rick Ward Senior DBA Great Universal Stores Home Shopping MANCHESTER, UK All views and comments in this e-mail are expressed by myself only, and are not necessarily representative of my employer, Great Universal Stores.