[jboss-user] [Security & JAAS/JBoss] - Re: Implement digestCallback into login-config.xml

2008-02-29 Thread ragavgomatam
I don't see you extracting the salt in preDigets or postDigest methods. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4133272#4133272 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4133272 ___

[jboss-user] [Security & JAAS/JBoss] - Re: Implement digestCallback into login-config.xml

2008-02-28 Thread fjaouen
Hi, I progress but I'm still blocked... My JBoss config is: guest java:/jdbc/accovia/e2e SELECT age_nom_cle FROM age WHERE age_cd=? SELECT age_roles_cd, 'Roles' FROM age_roles WHERE age_cd=?

[jboss-user] [Security & JAAS/JBoss] - Re: Implement digestCallback into login-config.xml

2008-02-19 Thread ragavgomatam
A salt is a random number of a fixed length. This salt must be different for each stored entry. It must be stored as clear text next to the hashed password. A 64 bits salt is recommended in RSA PKCS5 standard. salt can be extracted from hash assuming 6 byte salt: private static byte[] extract