[
https://issues.jboss.org/browse/WFCORE-2186?page=com.atlassian.jira.plugi...
]
Michal Petrov commented on WFCORE-2186:
---------------------------------------
Object notation works, i.e.
{code}
/subsystem=elytron/filesystem-realm=fsrealm/identity=admin:set-password(bcrypt={"iteration-count"=>42,"password"=>"passwrod1","salt"=>bytes{0x31,0x32,0x33}})
{code}
But given that the shorter format works for other things I assume it should work for this
as well.
Note: the above command will fail to create a password, the iteration-count must be
between 4 and 31 and salt must 16 bytes long, this one will work:
{code}
/subsystem=elytron/filesystem-realm=fsrealm/identity=admin:set-password(bcrypt={"iteration-count"=>12,"password"=>"passwrod1","salt"=>bytes{0x31,0x32,0x33,0x32,0x31,0x32,0x33,0x32,0x31,0x32,0x33,0x32,0x31,0x32,0x33,0x32}})
{code}
Salted password cannot be set through CLI for Elytron
filesystem-realm identity
-------------------------------------------------------------------------------
Key: WFCORE-2186
URL:
https://issues.jboss.org/browse/WFCORE-2186
Project: WildFly Core
Issue Type: Bug
Components: CLI
Affects Versions: 3.0.0.Alpha16
Reporter: Ondrej Lukas
Assignee: Michal Petrov
Password encryption/hash mechanisms which contain {{salt}} attribute for filesystem-realm
identity cannot be added through CLI. {{set-password}} operation fails and finishes with
failure-description "WFLYCTL0155: password may not be null" even if password was
set. It seems when {{salt}} attribute with {{bytes}} value is used then {{password}}
attribute is ignored by CLI.
Following password encryption/hash mechanisms from filesystem-realm identity are affected
by issue:
- {{bcrypt}}
- {{salted-simple-digest}}
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)