Extend SecureIdentityLoginModule to externalize the secret ---------------------------------------------------------- Key: JBAS-2895 URL: http://jira.jboss.com/jira/browse/JBAS-2895 Project: JBoss Application Server Issue Type: Feature Request Security Level: Public(Everyone can see) Components: JCA service, Security Affects Versions: JBossAS-4.0.3 SP1, JBossAS-3.2.8 Final Reporter: Scott M Stark Assigned To: Scott M Stark Fix For: JBossAS-4.0.6.CR1 The SecureIdentityLoginModule is a simple security by obscurity approach to hiding the jca password. Having the secret used by the PBE externalized with an ability to hash it reversibly would make this more flexible.