For password policy enforcement the server needs to receive the password in plain text.
For users without SSL, however, they probably want a way to continue the existing behavior of hashing the password in the client before sending it over the wire.
Need to also figure out what the default should be, what the right interface to control this in the drivers is, etc.
- is depended on by
-
SERVER-7363 Allow users to set specify a password validation policy
-
- Open
-
-
-
- Closed
-
-
-
- Closed
-
- is duplicated by
-
SERVER-10648 createUser and updateUser commands should allow client to supply digested password or cleartext password.
-
- Closed
-