[icecast] encrypted passwords in Icecast 2

[Michael Smith]

On Wednesday 27 August 2003 21:29, pdl at sindominio.net wrote:
> hello !
> I've just installed the debian package icecast2 (I have the icecast 1.3.12
> before) and I have a doubt about the passwords. In the icecast 1.3.* we
> should use the mkpasswd for our pass and put the crypted output to
> icecast.conf file.
>
> Isn't possible in the icecast.xml file?? (perhaps is not necessaty, I
> don't know). If this is so, can I change the permissions to this file to
> something like 660 ?

The crypted password support in icecast 1.x was not useful - it provided 
_zero_ additional security, so it just made people THINK it was safer when it 
wasn't - and as such, was actually counterproductive. 

You should make it readable only by the user you run icecast as.

Mike

--- >8 ----
List archives:  http://www.xiph.org/archives/
icecast project homepage: http://www.icecast.org/
To unsubscribe from this list, send a message to 'icecast-request at xiph.org'
containing only the word 'unsubscribe' in the body.  No subject is needed.
Unsubscribe messages sent to the list will be ignored/filtered.