спасибо, прочитал на орге в issue:

Quote:

Gábor Hojtsy - January 29, 2009 - 22:00
Yes, it is insecure and use of the module is not suggested. It was removed from Drupal 6 and replaced with OpenID, which is much more secure, and makes absolutely more sense to use. I'd suggest you just use OpenID and do not enable this module. Drupal.org needs to support this functionality for some time to come but will get rid of this module sooner or later.

Спасибо. У меня есть 3 сайта со своими базами данных. Как мне технически связать их через аутентификацию ? (как drupal.ru , drupaler.ru,drupal.org здесь на сайте реализовано)