Unless/until we fix the storage of passwords for Beaker's native
password-based auth, I'd like to explicitly warn people away from
relying on that configuration in the docs.
However, our own solution to that problem is to let mod_auth_kerb do the
heavy lifting, which isn't going to be applicable to something like
beaker.fedoraproject.org
Has anyone tried to use mod_auth_oauth at all? I'm wondering if that may
be a more upstream-friendly alternative that still avoids relying on the
currently-not-suitable-for-production-use-on-the-big-bad-internet
password based auth.
Cheers,
Nick.
--
Nick Coghlan
Red Hat Infrastructure Engineering & Development, Brisbane
Testing Solutions Team Lead
Beaker Development Lead (
http://beaker-project.org/)