[IMP] base_crypt: more doc in module description, mention of conflict with users_ldap

bzr revid: odo@openerp.com-20110615173110-xlt1yo5a1tuzq9dc

1 files changed, 27 insertions, 10 deletions

diff --git a/addons/base_crypt/__openerp__.py b/addons/base_crypt/__openerp__.py
index fb152da929d..c074718b6fe 100644
--- a/addons/base_crypt/__openerp__.py
+++ b/addons/base_crypt/__openerp__.py
@@ -26,18 +26,35 @@
     "website" : "http://www.openerp.com",
     "category" : "Tools",
     "description": """
-This module replaces the cleartext password in the database with a password hash.
-=================================================================================
+Replaces cleartext passwords in the database with a secure hash
+===============================================================
+For your existing user base, the removal of the cleartext
+passwords occurs the first time a user logs into the database,
+after installing base_crypt.
 
-It prevents anyone from reading the original password.
-For your existing user base, the removal of the cleartext passwords occurs the first time
-a user logs into the database, after installing base_crypt.
-After installing this module it won't be possible to recover a forgotten password for your
-users, the only solution is for an admin to set a new password.
+All passwords will be replaced by a secure, salted, cryptographic
+hash, preventing anyone from reading the original password in
+the database.
+
+After installing this module it won't be possible to recover a
+forgotten password for your users, the only solution is for an
+admin to set a new password.
+
+Security Warning
+++++++++++++++++
+Installing this module does not mean you can ignore other security measures,
+as the password is still transmitted unencrypted on the network, unless you
+are using a secure protocol such as XML-RPCS.
+It also does not protect the rest of the content of the database, which may
+contain critical data. Appropriate security measures need to be implemented
+by the system administrator in all areas, such as: protection of database
+backups, system files, remote shell access, physical server access, etc.
+
+Interation with LDAP authentication
++++++++++++++++++++++++++++++++++++
+This module is currently not compatible with the ``user_ldap`` module and
+will disable LDAP authentication completely if installed at the same time.
 
-Note: installing this module does not mean you can ignore basic security measures,
-as the password is still transmitted unencrypted on the network (by the client),
-unless you are using a secure protocol such as XML-RPCS.
                     """,
     "depends" : ["base"],
     "data" : [],