Hi all,

In my database I have the following table in order to keep users and each roles :


  | CREATE TABLE public.jboss_users
  | (
  |   id bigserial NOT NULL,
  |   name varchar(64),
  |   passwd varchar(100),
  |   therole varchar(100),
  |   CONSTRAINT jboss_users_pkey PRIMARY KEY (id)
  | ) 
  | 

and my login-config.xml :

  | <application-policy name="sms">
  |             <authentication>
  |             <login-module 
code="org.jboss.security.auth.spi.DatabaseServerLoginModule"
  |                     flag="required">
  |             <module-option name="dsJndiName">java:/PostgresDS</module-option>
  |             <module-option name="principalsQuery"> select passwd from Jboss_users 
where name=?</module-option>
  |             <module-option name="rolesQuery"> select therole,'Roles' from 
Jboss_users where name=?</module-option>
  |             </login-module>
  |             </authentication>
  | 
  |     </application-policy>
  | 
Until now all goes fine BUT when I tried to use password hashing technique I get a 
login error.
I change my login-config.xml to 

  | <application-policy name="sms">
  |             <authentication>
  |             <login-module 
code="org.jboss.security.auth.spi.DatabaseServerLoginModule"
  |                     flag="required">
  |             <module-option name="dsJndiName">java:/PostgresDS</module-option>
  |             <module-option name="hashAlgorithm">MD5</module-option>
  |             <module-option name="hashEncoding">base64</module-option>
  |             <module-option name="principalsQuery"> select passwd from Jboss_users 
where name=?</module-option>
  |             <module-option name="rolesQuery"> select therole,'Roles' from 
Jboss_users where name=?</module-option>
  |             </login-module>
  |             </authentication>
  |     </application-policy>
  | 

Also in database the password is stored in MD5 format:


  | java -classpath ./jbosssx.jar org.jboss.security.Base64Encoder passwd MD5
  | 

Did I miss something ??
Does anyone succeed setting up this password hashing feature ??

Thanks in advance 
George

View the original post : 
http://www.jboss.org/index.html?module=bb&op=viewtopic&p=3834093#3834093

Reply to the post : 
http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&p=3834093


-------------------------------------------------------
This SF.Net email is sponsored by Sleepycat Software
Learn developer strategies Cisco, Motorola, Ericsson & Lucent use to 
deliver higher performing products faster, at low TCO.
http://www.sleepycat.com/telcomwpreg.php?From=osdnemail3
_______________________________________________
JBoss-user mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/jboss-user

Reply via email to