[jboss-user] [Security JAAS/JBoss] - Re: Implement digestCallback into login-config.xml

2008-02-29 Thread ragavgomatam
I don't see you extracting the salt in preDigets or postDigest methods. View the original post : http://www.jboss.com/index.html?module=bbop=viewtopicp=4133272#4133272 Reply to the post : http://www.jboss.com/index.html?module=bbop=postingmode=replyp=4133272

[jboss-user] [Security JAAS/JBoss] - Re: Implement digestCallback into login-config.xml

2008-02-28 Thread fjaouen
Hi, I progress but I'm still blocked... My JBoss config is: application-policy name=WebAppE2E login-module code=org.jboss.security.auth.spi.DatabaseServerLoginModule flag=required module-option name=unauthenticatedIdentityguest/module-option

[jboss-user] [Security JAAS/JBoss] - Re: Implement digestCallback into login-config.xml

2008-02-19 Thread ragavgomatam
A salt is a random number of a fixed length. This salt must be different for each stored entry. It must be stored as clear text next to the hashed password. A 64 bits salt is recommended in RSA PKCS5 standard. salt can be extracted from hash assuming 6 byte salt: private static byte[]