0 Replies Latest reply on May 12, 2015 6:37 AM by mnvasanth

    Bug in JBoss Base64Encoder?

    mnvasanth

      Hi,

      I am developing a web application with authentication based in JAAS.  I have used used JBoss EAP for deployment and testing. The following is the security domain configuration

      <security-domain name="myrealm">

                          <authentication>

                              <login-module code="Database" flag="required">

                                  <module-option name="dsJndiName" value="java:/jdbc/authen-user"/>

                                  <module-option name="principalsQuery" value="select password from AuthenticationUser where name = ?"/>

                                  <module-option name="rolesQuery" value="select groupName,'Roles' from AuthenticationUser where name=?"/>

                                   <module-option name="hashAlgorithm" value="SHA-512"/>

                                   <module-option name="hashEncoding" value="BASE64"/>

                              </login-module>

                          </authentication>

      </security-domain>

      The authentication always fails saying wrong password. When debugging into this issue more, it seems org.jboss.security.Base64Encoder#process(..) method is adding an line spacing(\n) at 76th character position.

       

      The version of EAP I am using is 6.4.0. Is there any bug raised for this error? It seems like a bug to me!