JBoss portal Passwords are encrypted. -- How do i decrypt

[bmcgovern]

I have a jaas login module. Its DatabaseLoginModule thats authenticating not only my portal but also some supporting webapps.

Works like a charm. Problem is, im using the jboss portal database for my userbase and role management. Those passwords are encrypted. I have to supply the encrypted password in my login field for it to work. Is there a way I can make JAAS decrypt it on the fly. OR is there a flag that I can set in jboss portal to turn off decryption?

Thanks

[bdaw]

It's an md5 hash so you don't decrypt. Just compute a hash and compare with value in DB.

org.jboss.portal.common.util.Tools.md5AsHexString(password);

[bmcgovern]

Ok, but remember im using jaas. So is there a param that I can use to decrypt the MD5 in my login-config?

[bdaw]

Do you really want to decrypt md5? You will definitely get the Fields medal if you succeed ;)

The param for login-config you are looking for is "hashAlgorithm" - http://wiki.jboss.org/wiki/Wiki.jsp?page=DatabaseServerLoginModule

[bmcgovern]

No fields medal for me. haha. I meant .. encrypt on the way down, which i was able to do , not decrypt on the way up.. my mistake.

[bmcgovern]

By the way, this is my login-config.xml and hashAlgorithm doesnt work. But Programmatically converting string to MD5 does. Any ideas?

<application-policy name="portal">
 <authentication>
 <login-module code = "org.jboss.security.auth.spi.DatabaseServerLoginModule" flag = "required">
 <module-option name="dsJndiName">java:/PortalDS</module-option>
 <module-option name="principalsQuery">SELECT jbp_password FROM jbp_users WHERE jbp_uname=?</module-option>
 <module-option name="rolesQuery">SELECT jbp_roles.jbp_name, 'Roles' FROM jbp_role_membership INNER JOIN jbp_roles ON jbp_role_membership.jbp_rid = jbp_roles.jbp_rid INNER JOIN jbp_users ON jbp_role_membership.jbp_uid = jbp_users.jbp_uid WHERE jbp_users.jbp_uname=?</module-option>
 <module-option name="hashAlgorithm">MD5</module-option>
 </login-module>
 </authentication>
 </application-policy>

[bdaw]

Try:

<module-option name="hashAlgorithm">MD5</module-option>
<module-option name="hashEncoding">HEX</module-option>

[bmcgovern]

HEX was the trick. Thank you.

Now.. for my next fields medal....

[bdaw]

:)