Steps to Encrypt the Jboss admin-console password

[mahi4422]

Hi,

I am new to jboss AS. I want to secure my jboss admin-cosole password. so that I planned to encrypt the password.

we are using Jboss AS 6 version. if any one tell me the steps how to encrypt the password exist in the file jmx-console-users.properties

this step is just i tried to encrypt password.when i hit this command in command line

Java -cp lib/jboss-logging.jar:lib/jbosssx.jar org.jboss.resource.security.SecureIdentityLoginModule $admin  

result : I got encoded password.

after that paste it in the jmx-console-users.properties file like admin=encoded data [username=password]

I think it is not working .when I try to login the admin-console (http://localhost:8080/admin-console/login.seam?conversationID=8) by using admin/admin username and password.it is throwing  invalid password.if i used the encoded password then i able to login.

Best Regards.

[jcacek]

Hello,

use hashed values to protect your passwords. Look at http://docs.jboss.org/jbosssecurity/docs/6.0/security_guide/html/Login_Modules.html#Using_JBoss_Login_Modules-Password_Hashing for details.

[ramp2525]

Hi,

Follow below steps.

1) Issue following command to get the encrypted password.

echo -n password | openssl dgst -md5 -binary | openssl base64

2) Add following lines in <Jboss Home Directory>/server/default/conf/login-config.xml inside <application-policy name="jmx-console">

<module-option name="hashAlgorithm">MD5</module-option>

<module-option name="hashEncoding">base64</module-option>

3) Uncomment below line in <Jboss Home Directory>/common/deploy/jmx-console.war/WEB-INF/jboss-web.xml

<security-domain>java:/jaas/jmx-console</security-domain>

4) Add the password which you have generated in step 1 to the following file.

<Jboss Home Directory>/server/default/conf/props/jmx-console-users.properties like below

admin=X03MO1qnZdYdgyfeuILPmQ==