[LCP]Suggestions for authenticating users...

[Andrew Edmondson]

I would go with the crypt()ed passwords using an /etc/passwd - like file with 
locked down permissions. It's a known format, easy to use and you can use 
getlogin() to get the username and find the line you want in the file, thus 
preventing people from trying other account passwords.

Also, it would be very simple to write the function to update this kind of 
flat file.

It should be ok on windows too, the client connects to the server, the server 
asks for username, the client responds with the windows username, server asks 
for a password, user gives the password. Should be fine.

On Thu, 20 Jun 2002, you wrote:
> Hi,
>
> I am working on a application and would like some suggestions in regards
> to user authentication. I am using C and the application is being
> developed for linux, but it will have some xplatform/windows clients
> built at a later stage.
>
> CRYPT()ed passwords in MySQL is one possibility that I am looking into.
> But what others are worth a look. Any thoughts or suggestions?
>
> Thanks,
>
> Jay
>
> ----------------------------
> ii swear I never use vi^[:wq
> ----------------------------
>
> _______________________________________________
> This is the Linux C Programming List
>
> :  http://lists.linux.org.au/listinfo/linuxcprogramming List

-- 
Andrew Edmondson
Test Development Engineer
<-------------------------->
The discerning heart seeks knowledge, 
but the mouth of a fool feeds on folly.