From be8275c83c27b7776c4dc30968242e12bb965c11 Mon Sep 17 00:00:00 2001 From: christopherm Date: Wed, 15 Nov 2006 23:23:54 +0000 Subject: The admin password will now only be md5() in the database git-svn-id: https://ledger-smb.svn.sourceforge.net/svnroot/ledger-smb/branches/1.2@624 4979c152-3d1c-0410-bac9-87ea11338e46 --- sql/Pg-central.sql | 3 --- 1 file changed, 3 deletions(-) diff --git a/sql/Pg-central.sql b/sql/Pg-central.sql index 4bab66ed..50904801 100755 --- a/sql/Pg-central.sql +++ b/sql/Pg-central.sql @@ -44,9 +44,6 @@ COMMENT ON TABLE users_conf IS 'This is a completely dumb table that is a place COMMENT ON COLUMN users_conf.id IS 'Yes primary key with a FOREIGN KEY to users(id) is correct'; COMMENT ON COLUMN users_conf.password IS 'This means we have to get rid of the current password stuff and move to presumably md5()'; --- Per conversation with ChrisM, if the admin user has a null password a couple of things happen. --- 1. It is implicit that this is an initial install --- 2. If the admin password does not match the ledger-smb.conf admin password, we throw a hijack alert -- The two below statements must be run from a single session INSERT INTO users(username) VALUES ('admin'); INSERT INTO users_conf(id,password) VALUES (currval('users_id_seq'),NULL); -- cgit v1.2.3