diff --git a/conf/authen_CAS.conf.dist b/conf/authen_CAS.conf.dist index aa1cc059af..b6393fb5d8 100644 --- a/conf/authen_CAS.conf.dist +++ b/conf/authen_CAS.conf.dist @@ -16,16 +16,7 @@ $authen{user_module} = { # This should be a non-empty sublist of whatever is in $authen{user_module}. # Since the admin course provides overall power to add/delete courses, access # to this course should be protected by the best possible authentication you -# have available to you. The current default is -# WeBWorK::Authen::Basic_TheLastOption which is simple password based -# authentication for a password locally stored in your WeBWorK server's -# database. On one hand, this is necessary as the initial setting, as it is the -# only option available when a new server is being installed. However, since -# this option does not make use of multi-factor authentication or provide any -# capabilities to prevent dictionary attacks, etc. At the very least you should -# use a very strong password. If you have the option to use a more secure -# authentication approach to the admin course (one which you are confident -# cannot be spoofed) that is preferable. +# have available to you. $authen{admin_module} = [ 'WeBWorK::Authen::CAS' ]; diff --git a/conf/authen_ldap.conf.dist b/conf/authen_ldap.conf.dist index d6fcb18c77..3d794b96bb 100644 --- a/conf/authen_ldap.conf.dist +++ b/conf/authen_ldap.conf.dist @@ -16,16 +16,7 @@ $authen{user_module} = { # This should be a non-empty sublist of whatever is in $authen{user_module}. # Since the admin course provides overall power to add/delete courses, access # to this course should be protected by the best possible authentication you -# have available to you. The current default is -# WeBWorK::Authen::Basic_TheLastOption which is simple password based -# authentication for a password locally stored in your WeBWorK server's -# database. On one hand, this is necessary as the initial setting, as it is the -# only option available when a new server is being installed. However, since -# this option does not make use of multi-factor authentication or provide any -# capabilities to prevent dictionary attacks, etc. At the very least you should -# use a very strong password. If you have the option to use a more secure -# authentication approach to the admin course (one which you are confident -# cannot be spoofed) that is preferable. +# have available to you. $authen{admin_module} = [ 'WeBWorK::Authen::LDAP' ];