App Server = JBoss-2.4.4_Tomcat-4.0.1
OS = Windows XP

I have been successfully using the DatabaseServerLoginModule as my login module storing a clear-text password in the database. I have tried to start using hashed passwords with no success. Here are some quick questions before the details:

---------------------------------------------

Using MySQL, what is the type-mapping that the DatabaseServerLoginModule is expecting. Should I be storing byte[] mapped to BLOB or should I convert the byte[] back to a String and use VARCHAR?

-------------------------------------------------

Is this the right way to hash the password before persisting it?

protected static MessageDigest shaDigest = MessageDigest.getInstance("SHA");

this.hashedBytes = shaDigest.digest(clearTextPassword.getBytes());

Where hashedBytes would be persisted to the database using CMP 2.0.

------------------------------------

My Auth.conf file is as follows:

free2be {
org.jboss.security.auth.spi.DatabaseServerLoginModule required
dsJndiName="java:com.free2be.datasource.ApplicationDataSource"
principalsQuery="select password from user_profile username where username=?"
rolesQuery="SELECT t1.role_name, t2.role_group_name FROM role AS t1, role_group AS t2, user_profile AS t3 where t3.username=?"
hashAlgorithm=SHA
hashEncoding=hex
;
};

Any insight would be helpful.

Aaron Roller