--- loncom/html/adm/help/tex/Domain_Configuration_LangTZAuth.tex 2017/03/30 02:07:20 1.11 +++ loncom/html/adm/help/tex/Domain_Configuration_LangTZAuth.tex 2020/01/08 19:03:55 1.12 @@ -37,31 +37,6 @@ and might be for a load-balancer LON-CAP for a specific alias used for the domain. \end{itemize} -\textbf{Domain settings for internal authentication} can also be set via the same screen. - -\begin{itemize} -\item \textit{Encryption cost for bcrypt} (positive integer). Starting with 2.11.2, -bcrypt is used to encrypt the password for an internally authenticated user. -The complexity of the encryption is determined by the bcrypt cost value. A higher -value means more complexity (and more time to validate a user's password). The -cost needs to be a positive integer. If no value is set in a domain, a default -of 10 will be used. -\item \textit{Check bcrypt cost if authenticated}. When an internally authenticated user -logins and the credentials are validated, the bcrypt cost used for the original -encryption can be compared with the current domain default. If the cost for -the stored encryption is less than the current domain setting, there are two -options - either allow login and update the stored encryption using the higher cost, -or disallow login. The default is not to compare the original cost with the -current domain setting. -\item \textit{Existing crypt-based switched to bcrypt if authenticated}. When an internally -authenticated user logs-in and the credentials are validated, if the stored -credentials are currently encrypted with crypt, there is an option to update -the stored encryption to use bcrypt, with or without backing-up the existing passwd -file to a passwd.bak file. The default is not to update the stored passwd file, -so existing users who have crypt-based stored passwords will continue to do so -until such time as they change their password. -\end{itemize} - \textbf{Institutional user types} can also be defined for the domain via the same screen. Prior to LON-CAPA 2.11, institutional user types were defined in the \&inst\_usertypes