[Acegisecurity-developer] acegi & Mysql
hello all, i am trying to run acegi contacts sample with MySQL, and i am getting errors during initialization due to dataSourcePopulator. Looks like MySQL 4.1 does not accept the syntax used by populator.. i don't have source files for contacts, so best i can do is to disable dataSourcePopulator and create tables myself.. anyone has sample sql of tables that need to be created? thanx and regards marco --- This SF.Net email is sponsored by Oracle Space Sweepstakes Want to be the first software developer in space? Enter now for the Oracle Space Sweepstakes! http://ads.osdn.com/?ad_idt12&alloc_id344&op=click ___ Home: http://acegisecurity.sourceforge.net Acegisecurity-developer mailing list Acegisecurity-developer@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/acegisecurity-developer
Re: [Acegisecurity-developer] acegi & Mysql
Marco Mistroni wrote: hello all, i am trying to run acegi contacts sample with MySQL, and i am getting errors during initialization due to dataSourcePopulator. Looks like MySQL 4.1 does not accept the syntax used by populator.. i don't have source files for contacts, so best i can do is to disable dataSourcePopulator and create tables myself.. anyone has sample sql of tables that need to be created? thanx and regards marco Hi Marco Try: http://forum.springframework.org/viewtopic.php?t=1346 http://forum.springframework.org/viewtopic.php?t=3750 http://forum.springframework.org/viewtopic.php?t=1061 http://forum.springframework.org/viewtopic.php?t=4665 Cheers Ben --- This SF.Net email is sponsored by Oracle Space Sweepstakes Want to be the first software developer in space? Enter now for the Oracle Space Sweepstakes! http://ads.osdn.com/?ad_id=7412&alloc_id=16344&op=click ___ Home: http://acegisecurity.sourceforge.net Acegisecurity-developer mailing list Acegisecurity-developer@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/acegisecurity-developer
Re: [Acegisecurity-developer] acegi & Mysql
Hello Ben, thanx, following those links i was able to see the 'power' of acegi!! it's simply great! i have one question though.. in one of sampe sql files, password were encrypted... and i was wondering how to deal with encryption in acegi 1 - which encryption mechanism is used? 2 - if i want to add a new user, how do i encrypt its password? 3 - how and when (and which parameter is used) for encrypting the passsword provided via the web to acegi so that the validty can be checked against the database? is it hte saltSource parameter of authenticationManager? where can i get the sources of the Contacts application? thanx in advance and regards marco On 5/20/05, Ben Alex <[EMAIL PROTECTED]> wrote: > Marco Mistroni wrote: > > >hello all, > > i am trying to run acegi contacts sample with MySQL, and i am getting > >errors during initialization due to dataSourcePopulator. > >Looks like MySQL 4.1 does not accept the syntax used by populator.. > >i don't have source files for contacts, so best i can do is to disable > >dataSourcePopulator and create tables myself.. > >anyone has sample sql of tables that need to be created? > > > >thanx and regards > > marco > > > > > > > Hi Marco > > Try: > > http://forum.springframework.org/viewtopic.php?t=1346 > http://forum.springframework.org/viewtopic.php?t=3750 > http://forum.springframework.org/viewtopic.php?t=1061 > http://forum.springframework.org/viewtopic.php?t=4665 > > Cheers > Ben > > > --- > This SF.Net email is sponsored by Oracle Space Sweepstakes > Want to be the first software developer in space? > Enter now for the Oracle Space Sweepstakes! > http://ads.osdn.com/?ad_id=7412&alloc_id=16344&op=click > ___ > Home: http://acegisecurity.sourceforge.net > Acegisecurity-developer mailing list > Acegisecurity-developer@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/acegisecurity-developer > --- This SF.Net email is sponsored by Oracle Space Sweepstakes Want to be the first software developer in space? Enter now for the Oracle Space Sweepstakes! http://ads.osdn.com/?ad_idt12&alloc_id344&op=click ___ Home: http://acegisecurity.sourceforge.net Acegisecurity-developer mailing list Acegisecurity-developer@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/acegisecurity-developer
Re: [Acegisecurity-developer] acegi & Mysql
Marco Mistroni wrote: Hello Ben, thanx, following those links i was able to see the 'power' of acegi!! it's simply great! i have one question though.. in one of sampe sql files, password were encrypted... and i was wondering how to deal with encryption in acegi 1 - which encryption mechanism is used? 2 - if i want to add a new user, how do i encrypt its password? 3 - how and when (and which parameter is used) for encrypting the passsword provided via the web to acegi so that the validty can be checked against the database? is it hte saltSource parameter of authenticationManager? Acegi Security doesn't have any encryption libraries. Encryption is two directional, as in you can take unencrypted input, encrypt it, then decrypt it back to the original. Acegi Security uses one-way hash algorithms such as MD5 and SHA1, which take unencrypted input and generate a hash code. A hash code cannot be used to regenerate the original unencrypted input. The DaoAuthenticationProvider offers a PasswordEncoder property that handles all of this. It's discussed further at http://acegisecurity.sourceforge.net/docbook/acegi.html#security-authentication-provider-dao and in the JavaDocs. where can i get the sources of the Contacts application? CVS. Take a look at http://acegisecurity.sourceforge.net/cvs-usage.html. Best regards Ben --- This SF.Net email is sponsored by Oracle Space Sweepstakes Want to be the first software developer in space? Enter now for the Oracle Space Sweepstakes! http://ads.osdn.com/?ad_id=7412&alloc_id=16344&op=click ___ Home: http://acegisecurity.sourceforge.net Acegisecurity-developer mailing list Acegisecurity-developer@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/acegisecurity-developer
Re: [Acegisecurity-developer] acegi & Mysql
Hello Ben, thanks for your reply so if i don't use saltSource or passwordEncoder then i don't need to encrypt anything, is that correct? because i want to be able to add my users programmatically via web interface, and at the same time i want to encrypt their password in the database.. what i am missing is how to get the encrypted value sorry maybe it's a little off-topic but i am little new to encryption & security.. thanx in advance and regars marco On 5/22/05, Ben Alex <[EMAIL PROTECTED]> wrote: > Marco Mistroni wrote: > > >Hello Ben, > > thanx, following those links i was able to see the 'power' of > >acegi!! it's simply great! > >i have one question though.. > >in one of sampe sql files, password were encrypted... and i was > >wondering how to deal with encryption in acegi > >1 - which encryption mechanism is used? > >2 - if i want to add a new user, how do i encrypt its password? > >3 - how and when (and which parameter is used) for encrypting the > >passsword provided via the web to acegi so that the validty can be > >checked against the database? > > > >is it hte saltSource parameter of authenticationManager? > > > > > > > Acegi Security doesn't have any encryption libraries. Encryption is two > directional, as in you can take unencrypted input, encrypt it, then > decrypt it back to the original. Acegi Security uses one-way hash > algorithms such as MD5 and SHA1, which take unencrypted input and > generate a hash code. A hash code cannot be used to regenerate the > original unencrypted input. The DaoAuthenticationProvider offers a > PasswordEncoder property that handles all of this. It's discussed > further at > http://acegisecurity.sourceforge.net/docbook/acegi.html#security-authentication-provider-dao > and in the JavaDocs. > > >where can i get the sources of the Contacts application? > > > > > CVS. Take a look at http://acegisecurity.sourceforge.net/cvs-usage.html. > > Best regards > Ben > > > --- > This SF.Net email is sponsored by Oracle Space Sweepstakes > Want to be the first software developer in space? > Enter now for the Oracle Space Sweepstakes! > http://ads.osdn.com/?ad_id=7412&alloc_id=16344&op=click > ___ > Home: http://acegisecurity.sourceforge.net > Acegisecurity-developer mailing list > Acegisecurity-developer@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/acegisecurity-developer > --- This SF.Net email is sponsored by Oracle Space Sweepstakes Want to be the first software developer in space? Enter now for the Oracle Space Sweepstakes! http://ads.osdn.com/?ad_idt12&alloc_id344&op=click ___ Home: http://acegisecurity.sourceforge.net Acegisecurity-developer mailing list Acegisecurity-developer@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/acegisecurity-developer
Re: [Acegisecurity-developer] acegi & Mysql
Marco Mistroni wrote: Hello Ben, thanks for your reply so if i don't use saltSource or passwordEncoder then i don't need to encrypt anything, is that correct? because i want to be able to add my users programmatically via web interface, and at the same time i want to encrypt their password in the database.. what i am missing is how to get the encrypted value sorry maybe it's a little off-topic but i am little new to encryption & security.. Hi Macro When you initially save the password to your database, you'll need to perform the one-way hash. Just use the public method provided by your chosen PasswordEncoder implementation to do this. Best regards Ben --- This SF.Net email is sponsored by Oracle Space Sweepstakes Want to be the first software developer in space? Enter now for the Oracle Space Sweepstakes! http://ads.osdn.com/?ad_id=7412&alloc_id=16344&op=click ___ Home: http://acegisecurity.sourceforge.net Acegisecurity-developer mailing list Acegisecurity-developer@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/acegisecurity-developer
