baculum: Add information about new method storing passwords

diff --git a/gui/baculum/INSTALL b/gui/baculum/INSTALL
index d2f11fd6726c5df0fcc0a325b57c1515b6451403..69d980cadc8f2d3b5979114d3d98c4c2d8f2a472 100644 (file)
--- a/gui/baculum/INSTALL
+++ b/gui/baculum/INSTALL
@@ -177,7 +177,7 @@ AuthType Basic
 AuthUserFile /var/www/baculum/protected/Data/baculum.users
 Require valid-user
 
-For creating passwords file you may use htpasswd binary file in next way:
+For creating passwords file you can use htpasswd binary file in next way:
 
 # htpasswd -c /var/www/baculum/protected/Data/baculum.users someuser
 
@@ -187,6 +187,10 @@ NOTE!
 "-c" switcher you should use only for new created passwords file. For existing
 passwords file "-c" switcher should not be provided.
 
+NOTE!
+From version 7.2.0 plain text passwords for HTTP Basic authentication are no longer
+supported by Baculum. For more information please see README file (FAQ, point "b").
+
 At the end there is need to give web server user possibility to manage the auth file:
 For example:
 

diff --git a/gui/baculum/README b/gui/baculum/README
index e039161974b511577c5822eb6d33c3c8499000fe..f069c575d86aa37ed38fe76cebafb04ca23f33f4 100644 (file)
--- a/gui/baculum/README
+++ b/gui/baculum/README
@@ -183,3 +183,12 @@ show any content, then please consider increase "memory_limit" option in php.ini
 PHP configuration file to higher value than 256M. There is also possible to set
 limit window list elements on webGUI in window tools option (on window bottom
 bar), without changing "memory_limit" value.
+
+b) Just after finish initial wizard there is not possible to login to Baculum
+
+   From Baculum 7.2.0 has been changed format storing passwords. Passwords
+stored by Baculum for HTTP Basic authentication are encrypted by MD5. It is default
+alghoritm used by "htpasswd" program. Plain text passwords for HTTP Basic auth
+are not longer supported by Baculum.
+   From this reason good to check if used web server for Baculum is set to using
+MD5 type passwords in HTTP Basic authentication.