Excerpts from Nick Coghlan's message of 2013-11-20 11:59:46 +1000:
Unless/until we fix the storage of passwords for Beaker's native
password-based auth, I'd like to explicitly warn people away from
relying on that configuration in the docs.
Inspired by this ugly warning in our docs, I had a crack at implementing
salted password hashes. The passlib library [1] made it very easy,
including a nice upgrade path for existing sites. I finished off a patch
for it this afternoon [2] so it should be in Beaker 0.16.
Of course that doesn't help with FAS integration though, to which
mod_authnz_persona is probably the right solution.
[1]
http://pythonhosted.org/passlib/
[2]
http://gerrit.beaker-project.org/2562
--
Dan Callaghan <dcallagh(a)redhat.com>
Software Engineer, Hosted & Shared Services
Red Hat, Inc.