Encrypted LDAP password

[soussou]

Hi

I would like to encrypte LDAP access password into the Jboss file "jboss-service.xml".
This file contains :


Ldap/user

java.naming.factory.initial=fr.cimaya.topale.service.login.ldap.LdapCtxFactoryWrapper
java.naming.security.principal=cn=ExtranetAccess,CN=Users,DC=wsrv3,DC=extranet
java.naming.provider.url=ldap://195.160.4.10:636/CN=Users,DC=wsrv3,DC=extranet
java.naming.security.authentication=simple
java.naming.security.credentials=toto param.admin.login=tata
param.field.profile=telephoneNumber
param.fields.credentials.keys=companyId,companyUserId,recipientUserId,question,answer
param.fields.credentials.fields=postOfficeBox,postalCode,postalCode,st,l
param.field.failedLogin=description
param.maxLoginFailed=3
java.naming.security.protocol=ssl
java.naming.ldap.factory.socket=fr.cimaya.topale.service.login.ldap.DebugSocketFactory

javax.naming.ldap.InitialLdapContext
true



regards

[starksm64]

Unless the underlying ldap server supports a hashed password, there is no support for this currently.

[soussou]

Unless the underlying ldap server supports a hashed password, there is no support for this currently.

Hi Scott

This is not well for Jboos safety : a password in light into a config file ?
all the servers (Websphere, weblogic, ...) provide a means for crypting the passwords

Regards