Re: [uportal-dev] Encryption of cached passwords

2009-05-22 Thread Jen Bourey
OK, this modification is now available in the trunk as revision 46108. To use it, you'll need to uncomment and change the password in securityContext.xml. - Jen On Thu, May 21, 2009 at 7:27 PM, Anthony Colebourne < anthony.colebou...@manchester.ac.uk> wrote: > Hi, > > +1 support for this. > >

Re: [uportal-dev] Encryption of cached passwords

2009-05-22 Thread Jen Bourey
Hi Anthony, No, these changes don't currently affect the CAS ClearPass code. The only SecurityContext change I've made is to the context intended for caching the local login password. In part, this is because the ClearPass codebase isn't currently part of uPortal itself. However, you could cert

Re: [uportal-dev] Encryption of cached passwords

2009-05-21 Thread Anthony Colebourne
Hi, +1 support for this. While at the conference in Dallas, I discussed with many people about the CAS ClearPass code. I spoke mainly about the longevity of this codebase, many people were in support of getting this code to a level where it would be maintained across such changes. Would suc

[uportal-dev] Encryption of cached passwords

2009-05-21 Thread Jen Bourey
Hi all, I wanted to propose contributing some uPortal enhancements on behalf of the University of Chicago. The enhancements improve the existing CachePasswordSecurityContext to encrypt the password with a Spring-configurable encryption service before storing it in the session. We've also updated