[prev in list] [next in list] [prev in thread] [next in thread] 

List:       jetspeed-user
Subject:    RE: services.JetspeedSecurity.secure.passwords=true
From:       "Mark Orciuch" <mark_orciuch () ngsltd ! com>
Date:       2003-01-31 17:16:44
[Download RAW message or body]

How do you know that you encrypted the passwords the same way Jetspeed
would? My advice is to take David's advice. This way you will be sure that
exactly the same algorithm was used.

Best regards,

Mark Orciuch - morciuch@apache.org
Jakarta Jetspeed - Enterprise Portal in Java
http://jakarta.apache.org/jetspeed/

> -----Original Message-----
> From: Weßling, Achim [mailto:Achim.Wessling@gt-net.de]
> Sent: Thursday, January 30, 2003 2:10 AM
> To: Jetspeed Users List
> Subject: AW: services.JetspeedSecurity.secure.passwords=true
>
>
> Hallo,
>
> that's not the problem. I did encrypt the passwords in the database. The
> problem was, that I allways got an exception!
> The solution was to change from Tomcat 4.1.18 LE jdk1.4 Zip-Edition to
> Tomcat 4.1.18 Zip-Edition! There seams to be some dependences in Jetspeed
> 1.4B3 to the extra-LIBs which come with Full-Tomcat-Edition, that
> the 1.4B2
> didn't have!
> So, thanks for your!
>
> Achim
>
> -----Ursprüngliche Nachricht-----
> Von: David Sean Taylor [mailto:david@bluesunrise.com]
> Gesendet am: Donnerstag, 30. Januar 2003 04:57
> An: Jetspeed Users List
> Betreff: Re: services.JetspeedSecurity.secure.passwords=true
>
>
> On Wednesday, January 29, 2003, at 05:23  AM, Weßling, Achim wrote:
>
> > Hallo,
> >
> > I just tried to set the property
> > 'services.JetspeedSecurity.secure.passwords' to true. I changed the
> > password-field in the DB (MySQL) to the SHA-encoded password. I
> > restarted
> > jetspeed (1.4 B3 on tomcat 4.1.18 LE jdk1.4) and tried to login the
> > admin.
> > But I only get an exception! If I change everything back and try to
> > login
> > everything is nice.
> > I also recognized, that the version 1.4 B3 throws an exception when I
> > have a
> > typo in the password!!!
> > How can I solve this problems?
> > Thanks!
> >
>
> Your going to have to encrypt your passwords that are currently in the
> database.
> I can send you an action to do so if you'd like.
> Be careful to only run it only once
>
> --
> David Sean Taylor
> Bluesunrise Software
> david@bluesunrise.com
> +01 707 773-4646
>
>
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: jetspeed-user-unsubscribe@jakarta.apache.org
> For additional commands, e-mail: jetspeed-user-help@jakarta.apache.org
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: jetspeed-user-unsubscribe@jakarta.apache.org
> For additional commands, e-mail: jetspeed-user-help@jakarta.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: jetspeed-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: jetspeed-user-help@jakarta.apache.org

[prev in list] [next in list] [prev in thread] [next in thread]