[jboss-jira] [JBoss JIRA] (WFLY-7584) Configuring more password type should be allowed for Elytron filesystem-realm identity in CLI

Ondrej Lukas (JIRA) issues at jboss.org
Wed Nov 16 01:09:00 EST 2016


     [ https://issues.jboss.org/browse/WFLY-7584?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Ondrej Lukas updated WFLY-7584:
-------------------------------
    Description: 
In case when two password type are part of {{set-password}} operation for identity of Elytron filesystem-realm then only first of them is used and others are discarded. Configuring multiple credentials for one identity should be supported [1].

[1] https://issues.jboss.org/browse/WFLY-7584?focusedCommentId=13322919&page=com.atlassian.jira.plugin.system.issuetabpanels%3Acomment-tabpanel#comment-13322919

  was:
It is possible to specify more types of password encryption/hash mechanism in {{set-password}} operation of filesystem-realm identity. When this happens then first password encryption/hash mechanism is correctly used, but the rest of them is discarded. However it make sense to have set only one password encryption/hash mechanism for identity. It can be confusing to allow CLI command with more types of password encryption/hash mechanism specified.

Suggestion for improvement:
Disallow to use set-password operation with more than one password encryption/hash mechanism.

        Summary: Configuring more password type should be allowed for Elytron filesystem-realm identity in CLI  (was: User should be able to specify only one password type for Elytron filesystem-realm identity)


> Configuring more password type should be allowed for Elytron filesystem-realm identity in CLI
> ---------------------------------------------------------------------------------------------
>
>                 Key: WFLY-7584
>                 URL: https://issues.jboss.org/browse/WFLY-7584
>             Project: WildFly
>          Issue Type: Bug
>          Components: Security
>    Affects Versions: 11.0.0.Alpha1
>            Reporter: Ondrej Lukas
>            Assignee: Darran Lofthouse
>              Labels: user_experience
>
> In case when two password type are part of {{set-password}} operation for identity of Elytron filesystem-realm then only first of them is used and others are discarded. Configuring multiple credentials for one identity should be supported [1].
> [1] https://issues.jboss.org/browse/WFLY-7584?focusedCommentId=13322919&page=com.atlassian.jira.plugin.system.issuetabpanels%3Acomment-tabpanel#comment-13322919



--
This message was sent by Atlassian JIRA
(v7.2.3#72005)


More information about the jboss-jira mailing list