On Sep 29, 2008, at 6:22 PM, Aaron Evans wrote:
We do support bidirectional encoding, but I suspect your passwords are
already generated. For future reference see security-spi-atn.xml:


<!-- A Two-way encoding password service which also implements
CredentialPasswordEncoder
this Service can be used instead of for example the default provided
MessageDigestCredentialPasswordEncoder
  <bean id="org.apache.jetspeed.security.PasswordEncodingService"
  name="org.apache.jetspeed.security.spi.CredentialPasswordEncoder"
  class="org.apache.jetspeed.security.spi.impl.PBEPasswordService">
  <constructor-arg index="0">
  <!- secret PBE key password ->
  <value>********</value>
  </constructor-arg>
  </bean>
-->


Yes, our passwords are already generated.  But further still, we are
using a one-way hash algorithm (SHA-1), so this wouldn't work anyway,
would it?

Sorry, once you use the one-way you are stuck with it


---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to