-
1. Re: Securing the connection between slave host controller and master host controller
ctomc Mar 21, 2012 6:50 PM (in response to karink)Hi,
you can just use vault expression in place of secret value.
some thing along this lines:
<secret value=
"
${VAULT::keystore_pass::password::NmZiYmRmOGQtMTYzZS00MjE3LTllODMtZjI4OGM2NGJmODM4TElORV9CUkVBS3ZhdWx0}"
/>
for more info:
https://community.jboss.org/wiki/JBossAS7SecuringPasswords
https://community.jboss.org/wiki/AS7UtilisingMaskedPasswordsViaTheVault
--
tomaz
-
2. Re: Securing the connection between slave host controller and master host controller
karink Mar 22, 2012 3:05 AM (in response to ctomc)Hi Tomaz
thanks for your answer. I already know the Vault feature for storing/securing the password on the file system in a secure way.
Although, my question was not how to store it securely on the file system, but how the password will be transmitted from slave to master host controller on the network.
I don't understand that? Is it done just plain or DIGEST or something else
Regards
Karin -
3. Re: Securing the connection between slave host controller and master host controller
dlofthouse Mar 22, 2012 9:17 AM (in response to karink)1 of 1 people found this helpfulIt is the server side of the configuration that decides if the password will be transmitted using Digest or Plain - in general our default preference is to always use Digest authentication but we fall back to Plain when the server side of the configuration does not supply the information needed for Digest.
Server side in order to use Digest we need to be able to access either the plain text password for the user or we need to access a pre prepared hash of their username and password with the realm - for configurations that can't supply either of these we then fall back to the Plain mechanism. In practice this means that we use Digest when the properties file is used but fall back to Plain when either Ldap or Jaas are used for the verification.
This week I am starting work on the following task to make it possible to plug in different stores so we don't need to rely on the JAAS integration that makes us fall back to Plain: -
https://issues.jboss.org/browse/AS7-4194
There are a couple of slightly higher priority tasks I need to look at sooner but will also review for LDAP based authentication how we can implement a pass through digest mechanism against LDAP to again eliminate the plain text passwords: -
-
4. Re: Securing the connection between slave host controller and master host controller
karink Mar 22, 2012 10:40 AM (in response to dlofthouse)ok, cool.
thanks