diff roundup/mailgw.py @ 4486:693c75d56ebe

Add new config-option 'password_pbkdf2_default_rounds'... ...in 'main' section to configure the default parameter for new password generation. Set this to a higher value on faster systems which want more security. Thanks to Eli Collins for implementing this (see issue2550688). This now passes a config object (default None in which case we fall back to hard-coded parameters) into the password generation routine. This way we can add further parameters for password generation in the future. Also added a small regression test for this new feature.
author Ralf Schlatterbeck <schlatterbeck@users.sourceforge.net>
date Fri, 15 Apr 2011 08:09:59 +0000
parents 9be284ce56b7
children 8df9492c2746
line wrap: on
line diff
--- a/roundup/mailgw.py	Thu Apr 14 18:27:51 2011 +0000
+++ b/roundup/mailgw.py	Fri Apr 15 08:09:59 2011 +0000
@@ -1688,7 +1688,7 @@
         try:
             return db.user.create(username=trying, address=address,
                 realname=realname, roles=db.config.NEW_EMAIL_USER_ROLES,
-                password=password.Password(password.generatePassword()),
+                password=password.Password(password.generatePassword(), config=db.config),
                 **user_props)
         except exceptions.Reject:
             return 0

Roundup Issue Tracker: http://roundup-tracker.org/