[jboss-user] [Security & JAAS/JBoss] - Implement digestCallback into login-config.xml

[fjaouen]

Password in my database is encrypted with SHA-1 and a salt is add after the password.

I want to be able to validate my password using org.jboss.security.auth.spi.DatabaseServerLoginModule and used SHA-1 in the hashAlgorithm.

But I need also to add my salt to the password.

I see I can do it using digestCallback. So made an implementation of this interface and put it in my login-config.xml.

It is called but now I need to know exactly what to code ?

Do I code the postDigest or preDigest ? And how do I add my salt ?

Do you have any code as example ?

Thank you !

View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4130511#4130511

Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4130511