From 00642b4fe695acd4b6da4dc4a05be173bc501dd6 Mon Sep 17 00:00:00 2001 From: Alex Jordan Date: Wed, 14 Feb 2024 13:54:43 -0800 Subject: [PATCH] suggested edits from PR#2292 --- conf/authen_CAS.conf.dist | 11 +---------- conf/authen_ldap.conf.dist | 11 +---------- 2 files changed, 2 insertions(+), 20 deletions(-) diff --git a/conf/authen_CAS.conf.dist b/conf/authen_CAS.conf.dist index aa1cc059af..b6393fb5d8 100644 --- a/conf/authen_CAS.conf.dist +++ b/conf/authen_CAS.conf.dist @@ -16,16 +16,7 @@ $authen{user_module} = { # This should be a non-empty sublist of whatever is in $authen{user_module}. # Since the admin course provides overall power to add/delete courses, access # to this course should be protected by the best possible authentication you -# have available to you. The current default is -# WeBWorK::Authen::Basic_TheLastOption which is simple password based -# authentication for a password locally stored in your WeBWorK server's -# database. On one hand, this is necessary as the initial setting, as it is the -# only option available when a new server is being installed. However, since -# this option does not make use of multi-factor authentication or provide any -# capabilities to prevent dictionary attacks, etc. At the very least you should -# use a very strong password. If you have the option to use a more secure -# authentication approach to the admin course (one which you are confident -# cannot be spoofed) that is preferable. +# have available to you. $authen{admin_module} = [ 'WeBWorK::Authen::CAS' ]; diff --git a/conf/authen_ldap.conf.dist b/conf/authen_ldap.conf.dist index d6fcb18c77..3d794b96bb 100644 --- a/conf/authen_ldap.conf.dist +++ b/conf/authen_ldap.conf.dist @@ -16,16 +16,7 @@ $authen{user_module} = { # This should be a non-empty sublist of whatever is in $authen{user_module}. # Since the admin course provides overall power to add/delete courses, access # to this course should be protected by the best possible authentication you -# have available to you. The current default is -# WeBWorK::Authen::Basic_TheLastOption which is simple password based -# authentication for a password locally stored in your WeBWorK server's -# database. On one hand, this is necessary as the initial setting, as it is the -# only option available when a new server is being installed. However, since -# this option does not make use of multi-factor authentication or provide any -# capabilities to prevent dictionary attacks, etc. At the very least you should -# use a very strong password. If you have the option to use a more secure -# authentication approach to the admin course (one which you are confident -# cannot be spoofed) that is preferable. +# have available to you. $authen{admin_module} = [ 'WeBWorK::Authen::LDAP' ];