[jboss-dev-forums] [Design of Security on JBoss] - Re: SRP and SASL

[david.lloyd@jboss.com]

The implementation in SVN now actually authenticates.  I elected to make the server configurable (with respect to password verification) using SASL parameters.  You can choose whether to simply supply the password, supply a verifier (via custom callback), or supply a text-encoded verifier to the password callback (the SrpVerifier class has methods to encode and decode the information).

View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4099323#4099323

Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4099323