[jboss-jira] [JBoss JIRA] Commented: (SECURITY-410) Option to encrypt password in the login modules

Thu Apr 23 14:59:51 EDT 2009

    [ https://jira.jboss.org/jira/browse/SECURITY-410?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12464170#action_12464170 ] 

Anil Saldhana commented on SECURITY-410:
----------------------------------------

This JIRA task will basically check all the login modules that we ship to ensure that we can eliminate clear text passwords.

For example:  LdapExtLoginModule has the following: http://www.jboss.org/community/docs/DOC-11252

> Option to encrypt password in the login modules
> -----------------------------------------------
>
>                 Key: SECURITY-410
>                 URL: https://jira.jboss.org/jira/browse/SECURITY-410
>             Project: JBoss Security and Identity Management
>          Issue Type: Feature Request
>      Security Level: Public(Everyone can see) 
>          Components: JBossSX
>    Affects Versions: 2.0.3.SP1
>            Reporter: Anil Saldhana
>            Assignee: Anil Saldhana
>             Fix For: 2.0.4.GA
>
>

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira