[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: System password authentication
From: |
Larry Jones |
Subject: |
Re: System password authentication |
Date: |
Fri, 11 Apr 2003 11:30:02 -0400 (EDT) |
Brian Murphy writes:
>
> The "else if" here authenticates a user if she has supplied a (non blank)
> password but the system password is blank, Why?
That code is checking the *repository* password, not the system
password. An empty repository password means that *any* user-supplied
password should be accepted. After all, if you don't have a password,
it would be a little silly to complain that you mistyped it.
-Larry Jones
What this games needs are negotiated settlements. -- Calvin