[jboss-cvs] JBossAS SVN: r82165 - projects/docs/enterprise/4.3.3/Common_Criteria_Guide/en-US.

[jboss-cvs-commits at lists.jboss.org]

Author: Darrin
Date: 2008-12-09 20:15:03 -0500 (Tue, 09 Dec 2008)
New Revision: 82165

Modified:
   projects/docs/enterprise/4.3.3/Common_Criteria_Guide/en-US/Requirements_for_the_Evaluated_Configuration.xml
Log:
JBOSSCC-32

Modified: projects/docs/enterprise/4.3.3/Common_Criteria_Guide/en-US/Requirements_for_the_Evaluated_Configuration.xml
===================================================================
--- projects/docs/enterprise/4.3.3/Common_Criteria_Guide/en-US/Requirements_for_the_Evaluated_Configuration.xml	2008-12-10 01:14:34 UTC (rev 82164)
+++ projects/docs/enterprise/4.3.3/Common_Criteria_Guide/en-US/Requirements_for_the_Evaluated_Configuration.xml	2008-12-10 01:15:03 UTC (rev 82165)
@@ -218,7 +218,11 @@
                     <filename><replaceable>${JBOSS_HOME}</replaceable>/server/production/deploy</filename>.</para>
                 </listitem>
 
-                <listitem><para>Use password hashing so plain text passwords are not stored on the server.</para></listitem>
+                <listitem><para>Use password hashing and do not store plain text passwords on the server.</para>
+                <para>You should refer to the JBoss Enterprise Application Platform Configuration Guide, 
+                Chapter 8, Section 5.3.2 Password Hashing, for details on configuring this: 
+                <ulink url="http://www.redhat.com/docs/manuals/jboss/jboss-eap-4.3/doc/Server_Configuration_Guide/html-single/index.html#Using_JBoss_Login_Modules-Password_Hashing">http://www.redhat.com/docs/manuals/jboss/jboss-eap-4.3/doc/Server_Configuration_Guide/html-single/index.html#Using_JBoss_Login_Modules-Password_Hashing</ulink></para>
+                </listitem>
 
             </orderedlist>
         </section>