Installation

password setting

password setting

by Simon Hu -
Number of replies: 1

When evaluating webwork installed from LiveDVD, the webwork system only support for password with less than 9 characters (the system did not check 9th to last character of password) . Should length of password be increased by modifying configuration file?

In reply to Simon Hu

Re: password setting

by Jason Aubrey -
Hi Simon,

This is a limitation of the crypt() function in perl (and C). E.g.,

http://en.wikipedia.org/wiki/Crypt_(C)

states that "The user's password is truncated to eight characters, and those are coerced down to only 7-bits each; this forms the 56-bit DES key."

This is relatively weak (but not terrible) encryption these days, and it's probably time to take a look at using a more sophisticated approach.

Jason