Re: [Beaker-devel] Authentication for non-Kerberos Beaker instances

Excerpts from Nick Coghlan's message of 2013-11-20 11:59:46 +1000:

Unless/until we fix the storage of passwords for Beaker's native password-based auth, I'd like to explicitly warn people away from relying on that configuration in the docs.

Inspired by this ugly warning in our docs, I had a crack at implementing salted password hashes. The passlib library [1] made it very easy, including a nice upgrade path for existing sites. I finished off a patch for it this afternoon [2] so it should be in Beaker 0.16.

Of course that doesn't help with FAS integration though, to which mod_authnz_persona is probably the right solution.

[1] http://pythonhosted.org/passlib/ [2] http://gerrit.beaker-project.org/2562