[COUCHDB-2363] Specify user password hashing in docs for both .ini file and _users database

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Won't Fix
• Component/s: Documentation
• Assignee: Unassigned
• Reporter: Javier Candeira
• Created: 08/Oct/14 01:21
• Updated: 02/Sep/18 06:57
• Resolved: 02/Sep/18 06:57

Description

http://docs.couchdb.org/en/latest/intro/security.html#hashing-passwords and
http://docs.couchdb.org/en/1.6.1/intro/security.html#authentication-database

are incomplete for post-1.2 pbdf2 hashing, in that I needed to read https://issues.apache.org/jira/secure/attachment/12492631/0001-Integrate-PBKDF2.patch and iterate on a known hash instead of being able to just implement the hashing from reading the docs.